Conversation with yohoho@jabber.ccc.de at 2/22/2012 2:59:44 PM on 
LeonDavidson@jabber.org/jabber.org (jabber) 

(2:59:47 PM) leondavidson@jabber.org/jabber.org: yoooo my nigga 
(4:49:12 PM) yohoho@jabber.ccc.de: hi 

(4:51:26 PM) yohoho@jabber.ccc.de: oh look, wikileaks insurance file 

(4:51:27 PM) yohoho@jabber.ccc.de: this is good 

(7:43:47 PM) leondavidson@jabber.org/jabber.org: yoooooooooooo 

(7:43:55 PM) leondavidson@jabber.org/jabber.org: what up neegah 

(7:43:56 PM) yohoho@jabber.ccc.de: what up 

(7:44:03 PM) yohoho@jabber.ccc.de: congratulations homey 

(7:44:03 PM) leondavidson@jabber.org/jabber.org: chillin like a villain 

(7:44:14 PM) leondavidson@jabber.org/jabber.org: on getting over my shitty sickness? 

(7:44:20 PM) yohoho@jabber.ccc.de: hah yeah that too 

(7:44:41 PM) leondavidson@jabber.org/jabber.org: I been on twitter watching the dramau nfold 
with wikileaks 

(7:44:44 PM) leondavidson@jabber.org/jabber.org: so far so good 
(7:44:48 PM) yohoho@jabber.ccc.de: yes 

(7:44:49 PM) leondavidson@jabber.org/jabber.org: im pretty hype 
(7:44:52 PM) yohoho@jabber.ccc.de: all is well 
(7:44:54 PM) yohoho@jabber.ccc.de: major win 

(7:45:08 PM) leondavidson@jabber.org/jabber.org: I mean I'm half torn about that msm-limited 
shit 

(7:45:08 PM) leondavidson@jabber.org/jabber.org: but 
(7:45:10 PM) leondavidson@jabber.org/jabber.org: it worked out 

(7:45:21 PM) leondavidson@jabber.org/jabber.org: and sorry I ain't been aroun. been sick / 
family / irl / life / my girl bitching etc 

(7:45:32 PM) leondavidson@jabber.org/jabber.org: you ha me laughing with that infragard shit 
tho 

(7:45:39 PM) leondavidson@jabber.org/jabber.org: had+ 

(7:45:53 PM) leondavidson@jabber.org/jabber.org: those faggot ass feds are gonna be TIGHT 
(7:46:06 PM) leondavidson@jabber.org/jabber.org: in fact after we did infragard atlanta during 
lulzsec is when they started arresting fools 

(7:46:11 PM) leondavidson@jabber.org/jabber.org: so be on teh look out 
(7:46:27 PM) leondavidson@jabber.org/jabber.org: missed you tho nig <3 
(7:46:29 PM) leondavidson@jabber.org/jabber.org: how you been? 

(7:47:45 PM) leondavidson@jabber.org/jabber.org: another thing: have you heard from hyrriya? 
(7:47:56 PM) leondavidson@jabber.org/jabber.org: his boy bf2 has been hitting me up fo a 
week saying he broke out with $500 

(7:47:58 PM) leondavidson@jabber.org/jabber.org: and left him hangin 
(7:48:20 PM) yohoho@jabber.ccc.de: hrm what 
(7:48:24 PM) yohoho@jabber.ccc.de: well I don't know about that 
(7:48:27 PM) yohoho@jabber.ccc.de: but I been looking for him too 
(7:49:18 PM) leondavidson@jabber.org/jabber.org: ja 

(7:49:25 PM) leondavidson@jabber.org/jabber.org: I told the nigga to be easy he’ll show up 
eventually 
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(7:49:31 PM) leondavidson@jabber.org/jabber.org: cause he does disappear sometimes for 
weeks at a time 

(7:49:42 PM) leondavidson@jabber.org/jabber.org: also 

(7:49:59 PM) leondavidson@jabber.org/jabber.org: protip: if you didn’t know hyrrria=tnt hung 
out with TinKode and Brute 

(7:50:01 PM) leondavidson@jabber.org/jabber.org: tinkode got locked up 

(7:50:08 PM) leondavidson@jabber.org/jabber.org: so be on your p's and q's 

(7:50:20 PM) leondavidson@jabber.org/jabber.org: its possible homey might try to take those 

niggas with him 

(7:51:42 PM) yohoho@jabber.ccc.de: yeah I didn’t know that 

(7:51:46 PM) yohoho@jabber.ccc.de: I kind of figured though 

(7:52:02 PM) yohoho@jabber.ccc.de: hrm yes we almost borked the geo hack too 

(7:52:09 PM) yohoho@jabber.ccc.de: was a desparation move now that plesk is getting patched 

like fuck 

(7:52:16 PM) yohoho@jabber.ccc.de: I was in the FTP nd then the patched while I was on it 

(7:52:22 PM) yohoho@jabber.ccc.de: cshut down FTP I though tthey caught onto me 

(7:52:24 PM) leondavidson@jabber.org/jabber.org: fuck 

(7:52:32 PM) yohoho@jabber.ccc.de: I cried 

(7:52:35 PM) yohoho@jabber.ccc.de: it was big target 

(7:52:45 PM) leondavidson@jabber.org/jabber.org: so its lost? 

(7:52:51 PM) yohoho@jabber.ccc.de: so I just hit the infragard real quick just to have something 
for friday 

(7:52:52 PM) yohoho@jabber.ccc.de: but 

(7:52:54 PM) yohoho@jabber.ccc.de: then they turned shit back n and never changed passies 
(7:52:59 PM) yohoho@jabber.ccc.de: so ended up defacing anyway 
(7:53:06 PM) leondavidson@jabber.org/jabber.org: lolololololol 

(7:53:16 PM) leondavidson@jabber.org/jabber.org: infragrds a joke anyway, its the fbi's 
WEAKEST link 

(7:53:18 PM) leondavidson@jabber.org/jabber.org: technically 

(7:53:21 PM) leondavidson@jabber.org/jabber.org: if we want to infiltrate fbi 

(7:53:30 PM) leondavidson@jabber.org/jabber.org: we should go after the entire infragard 

network 

(7:53:39 PM) leondavidson@jabber.org/jabber.org: all those individual sites are run 
individually 

(7:53:43 PM) leondavidson@jabber.org/jabber.org: very lax security 
(7:53:46 PM) leondavidson@jabber.org/jabber.org: but golden user dbs 

(7:54:31 PM) leondavidson@jabber.org/jabber.org: another thing all my Chinese vpns and some 
roots cmpletely died on me 

(7:54:39 PM) leondavidson@jabber.org/jabber.org: don't think its foul play no one knows of 
those IPs 

(7:54:43 PM) leondavidson@jabber.org/jabber.org: but shits bugging me out 
(7:54:54 PM) leondavidson@jabber.org/jabber.org: jaychow gave me 1 box I was using 
(7:55:08 PM) yohoho@jabber.ccc.de: hrm 

(7:55:15 PM) yohoho@jabber.ccc.de: yeah this was some shitty ass windows vhost 

(7:55:17 PM) leondavidson@jabber.org/jabber.org: if I end up in china you know how that 

appened 
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(7:55:17 PM) leondavidson@jabber.org/jabber.org: ROFL 

(7:55:19 PM) yohoho@jabber.ccc.de: absolutely no users, no dbs, no files 

(7:55:28 PM) yohoho@jabber.ccc.de: hrm 

(7:55:29 PM) leondavidson@jabber.org/jabber.org: hmm 

(7:55:32 PM) yohoho@jabber.ccc.de: also I wouldn't really trust jc 

(7:55:38 PM) yohoho@jabber.ccc.de: he hasnt' done anything man 

(7:55:43 PM) yohoho@jabber.ccc.de: nothing but idle in our chan 

(7:55:47 PM) yohoho@jabber.ccc.de: and keeps asking me about JA 

(7:55:49 PM) leondavidson@jabber.org/jabber.org: and ask for Chinese shit 

(7:55:53 PM) leondavidson@jabber.org/jabber.org: WHICH REMIDNS ME SON 

(7:55:53 PM) yohoho@jabber.ccc.de: for real 

(7:55:58 PM) leondavidson@jabber.org/jabber.org: did Ja HIT YOU UP AT ALL? 

(7:56:00 PM) leondavidson@jabber.org/jabber.org: err caps 
(7:56:03 PM) yohoho@jabber.ccc.de: yes he did 
(7:56:07 PM) yohoho@jabber.ccc.de: a few days before release 
(7:56:09 PM) yohoho@jabber.ccc.de: and day of release 

(7:56:12 PM) leondavidson@jabber.org/jabber.org: whatd that bird nigga say 

(7:56:15 PM) yohoho@jabber.ccc.de: he actually indirectly asked me to spam stratfor again 

(7:56:20 PM) yohoho@jabber.ccc.de: and I sure as fuck did ahaha 

(7:56:25 PM) yohoho@jabber.ccc.de: with the resignation letter the guise wrote 

(7:56:39 PM) leondavidson@jabber.org/jabber.org: ololololololl 

(7:57:53 PM) leondavidson@jabber.org/jabber.org: update regarding redhack: 

(7:57:55 PM) leondavidson@jabber.org/jabber.org: 03:41 <NappyHead9067769> i am xdos, 
redstar 

03:41 <NappyHead9067769> redhack;) 

03:42 <NappyHead9067769> ;) Anyway, I will come later .. 

03:43 <NappyHead9067769> look at this http://www.redhackers.org/2012/Q2/general- 
directorate-of-security-ankara.html and 

http://www.kizilhack.org/2012/02/polisin-gizli-belgelerini-ve.html 
03:44 <NappyHead9067769> I miss you brother, take good care comrade. 

(7:57:59 PM) leondavidson@jabber.org/jabber.org: they ended up owning that police network 
(7:58:05 PM) leondavidson@jabber.org/jabber.org: dropped docs, and inforamnts docs 
(7:58:13 PM) yohoho@jabber.ccc.de: fuck yes 
(7:58:15 PM) yohoho@jabber.ccc.de: that is good 

(7:58:27 PM) leondavidson@jabber.org/jabber.org: everything is working out my nigga 

(7:58:30 PM) yohoho@jabber.ccc.de: we got a few new good targets as well 

(7:58:36 PM) leondavidson@jabber.org/jabber.org: ok great 

(7:58:46 PM) yohoho@jabber.ccc.de: it is too bad plesk is now blown up 

(7:58:46 PM) yohoho@jabber.ccc.de: sorta 

(7:58:56 PM) yohoho@jabber.ccc.de: fucking arstechnica investigative reporters 
(7:59:02 PM) leondavidson@jabber.org/jabber.org: they bothering you? 

(7:59:20 PM) yohoho@jabber.ccc.de: did you see that article they wrote? 

(7:59:28 PM) yohoho@jabber.ccc.de: 'anonymous hacking thousnads of boxes with plesk 
vulnerability' 

(7:59:30 PM) yohoho@jabber.ccc.de: or something 
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(7:59:59 PM) leondavidson@jabber.org/jabber.org: wtf? 

(8:00:07 PM) leondavidson@jabber.org/jabber.org: they putting it together 

(8:00:12 PM) leondavidson@jabber.org/jabber.org: cause last few hacks 

(8:00:16 PM) leondavidson@jabber.org/jabber.org: you saw fucking plesk default site 

(8:00:19 PM) leondavidson@jabber.org/jabber.org: people were asking about it 

(8:00:39 PM) leondavidson@jabber.org/jabber.org: ars technica likes to be on 'point' with shit 

but honestly blowing up our spot like that 

(8:00:43 PM) leondavidson@jabber.org/jabber.org: means they probably need to get owned 

(8:00:55 PM) yohoho@jabber.ccc.de: yeah I know 

(8:00:58 PM) yohoho@jabber.ccc.de: it was those two FTC boxes 

(8:01:01 PM) leondavidson@jabber.org/jabber.org: :/ 

(8:01:04 PM) yohoho@jabber.ccc.de: both ended up being mediatemple 

(8:01:06 PM) yohoho@jabber.ccc.de: was a mistake 

(8:01:13 PM) yohoho@jabber.ccc.de: but 

(8:01:13 PM) leondavidson@jabber.org/jabber.org: ja 

(8:01:17 PM) yohoho@jabber.ccc.de: plesk did issue security warnings 

(8:01:20 PM) yohoho@jabber.ccc.de: before the 2nd one 

(8:01:29 PM) yohoho@jabber.ccc.de: also both me and hw ere doing some mass mass scanning 

(8:01:34 PM) yohoho@jabber.ccc.de: thousands of domains 

(8:01:39 PM) yohoho@jabber.ccc.de: lol 

(8:01:56 PM) yohoho@jabber.ccc.de: hey 

(8:02:01 PM) yohoho@jabber.ccc.de: q is back again 

(8:02:02 PM) yohoho@jabber.ccc.de: as set 

(8:02:06 PM) yohoho@jabber.ccc.de: and already he is fucking shit up 

(8:02:20 PM) yohoho@jabber.ccc.de: well i'l start form the beggining I guess 

(8:02:24 PM) yohoho@jabber.ccc.de: ja hit me up the day of shit being released 

(8:02:36 PM) yohoho@jabber.ccc.de: and told me that it was important that we not directly say 

we gave them the emails 

(8:02:46 PM) yohoho@jabber.ccc.de: I was like ummm the whole world is going to know how it 
went down 

(8:02:49 PM) yohoho@jabber.ccc.de: ridiculous 

(8:02:52 PM) yohoho@jabber.ccc.de: but he's just liek avoid specifics 

(8:02:54 PM) yohoho@jabber.ccc.de: which is ok fine 

(8:03:37 PM) yohoho@jabber.ccc.de: he is probably paranoid about relationship with criminal 
activities, publishing leaks from hackers etc 
(8:04:02 PM) yohoho@jabber.ccc.de: anyway 

(8:04:10 PM) yohoho@jabber.ccc.de: I am sleeping when shit is released 
(8:04:14 PM) yohoho@jabber.ccc.de: then I wake up and see a wired article 
(8:04:21 PM) yohoho@jabber.ccc.de: that says 

(8:04:38 PM) yohoho@jabber.ccc.de: "Anons also told Wired that future collaborations with 
WikiLeaks could involve a series of hacks that will be announced, one after another, every 
Friday for the foreseeable future" 

(8:04:47 PM) yohoho@jabber.ccc.de: that type of shit 

(8:05:03 PM) yohoho@jabber.ccc.de: talk to quinn and had her remove certain more 
incriminating aspects for wikileaks 

(8:05:17 PM) yohoho@jabber.ccc.de: but I find out of all people tellin shit ... its q 
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(8:05:53 PM) yohoho@jabber.ccc.de: I tell him he is fucking up the relationship we built with 
WL when he say shit like that 

(8:05:59 PM) yohoho@jabber.ccc.de: and he bans me from reporter and anonops lol 

(8:06:08 PM) yohoho@jabber.ccc.de: I have since cleared shit up with opers there., tehy stripped 

his shit 

(8:06:12 PM) yohoho@jabber.ccc.de: yo that fool is fucked 

(8:06:25 PM) yohoho@jabber.ccc.de: why the fuck is he speaking on behalf of hacks he had 
nothing to do with, giving them inaccurate and damaging quotes 

(8:06:52 PM) leondavidson@jabber.org/jabber.org: (8:04:38 PM) yohoho@jabber.ccc.de: 
"Anons also told Wired that future collaborations with WikiLeaks could involve a 
series of hacks that will be announced, one after another, every Friday for the 
foreseeable future" = though we been saying on twitter we will continue to do FFFs 
(8:07:06 PM) leondavidson@jabber.org/jabber.org: so q was telling that to who? quin ? 

(8:07:26 PM) leondavidson@jabber.org/jabber.org: I’ll speak to him. I'm not liking this at all 
(8:08:27 PM) yohoho@jabber.ccc.de: quinn originally publised the weekly shit 
(8:08:30 PM) yohoho@jabber.ccc.de: which is fine and all 

(8:08:40 PM) yohoho@jabber.ccc.de: but there hasn't been any mention of future / current 
collaborations with WL 

(8:08:45 PM) yohoho@jabber.ccc.de: mostly because it's not actually happening 

(8:09:05 PM) yohoho@jabber.ccc.de: and implying they are involved with our weekly hax is not 

true and also could be legall bad for them 

(8:09:12 PM) yohoho@jabber.ccc.de: q ahs since said he wasn't responsible for that quote 
(8:09:43 PM) leondavidson@jabber.org/jabber.org: ja 

(8:09:55 PM) leondavidson@jabber.org/jabber.org: fuck ja. but it'd cause more drama for 
manning 

(8:09:59 PM) leondavidson@jabber.org/jabber.org: as hes tied to all that wl drama 
(8:10:01 PM) yohoho@jabber.ccc.de: regardless he told me to fuck off and banned me etc etc 
(8:10:08 PM) yohoho@jabber.ccc.de: fuck that fool 

(8:10:18 PM) yohoho@jabber.ccc.de: he was giving my half written press releases to jamie 
(8:10:24 PM) yohoho@jabber.ccc.de: shit meant for his eyes only 

(8:10:31 PM) yohoho@jabber.ccc.de: he gave them specialforces spool then lost it himself 
(8:10:51 PM) leondavidson@jabber.org/jabber.org: I'll handle him. having a stem convo with 
him now 

(8:10:57 PM) leondavidson@jabber.org/jabber.org: nigga needs to play his position 

(8:11:00 PM) leondavidson@jabber.org/jabber.org: aka lean the fuck back 

(8:11:06 PM) leondavidson@jabber.org/jabber.org: he did this during lulzsec too 

(8:11:16 PM) yohoho@jabber.ccc.de: crediblethreat if you have something to say, do it directly 

set only one thing, fuck you. 

set and bye. 

crediblethreat that was easy then 
set for comms, yes. 

crediblethreat didn’t need you then, don't need you now, but if you don't want to deal with 
unanswered questions, or address potentially irreconcilable political differences, then find a new 
crew 

set lol you don't need me? i don't need you. 
set gasp! 
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set you just keep on doing your meaningless battle which results in noting 

crediblethreat we are in the trenches risking our lives and freedoms firing upon the enemy and 

here you are still undermining our efforts I see 

set you can go out in the street and shoot wildly around saying "i’m risking my life and freedom", 
too. 

crediblethreat everything I do is carefully planned and executed 

crediblethreat while I was haxing shit you were issuing statements thanking the police for being 
part of the 99% 

-Global- We are pleased to announce that we are offering our users a limited number of 
free BNC connections to AnonOps generously provided by SrsVPS Go to 
http://anonops.com/tutorials/bnc.htmI 

crediblethreat what good are you? you can't hack, 
set forget it. you're right you don't need me. 
crediblethreat yes, but it's more than that 

crediblethreat if you continue to undermine our ops or put out statements that contradict or 
undermine our work then you'll have trouble 
set CONTINue TO UNDERMINE? 
set rofl 

set now this becomes entertaining 

set since now this didn't even cross my mi nd 

crediblethreat yo I don't forget 

-Global- You can request a BNC connection in #srsbnc A nick older than 7 days is required. 

set and i wouldn't undermine antisec, but if you want some clash, we can have it 
set we can make that personal, i am bored anyway 
crediblethreat you are taking time away from me rooting shit 
set aww 

set yeah i forgot, you#re busy making a revolution 

(8:11:20 PM) yohoho@jabber.ccc.de: is the extent of our convo 

(8:11:48 PM) leondavidson@jabber.org/jabber.org: cheking 

(8:11:53 PM) leondavidson@jabber.org/jabber.org: and dont save logs mofo 

(8:11:57 PM) leondavidson@jabber.org/jabber.org: all of us gotta be clean 100% 

(8:12:00 PM) yohoho@jabber.ccc.de: I don't, it's still open in tab 

(8:12:03 PM) leondavidson@jabber.org/jabber.org: kk 

(8:12:06 PM) yohoho@jabber.ccc.de: which I should probably close tabs 

(8:12:10 PM) yohoho@jabber.ccc.de: got like 40 lol 

(8:12:42 PM) leondavidson@jabber.org/jabber.org: yeah son 

(8:12:46 PM) leondavidson@jabber.org/jabber.org: my nigga on some real shit 

(8:12:53 PM) leondavidson@jabber.org/jabber.org: after infragard everyone needs to be 100% 

(8:13:02 PM) yohoho@jabber.ccc.de: yeah but this was a cheesy ass infragard site 

(8:13:05 PM) leondavidson@jabber.org/jabber.org: no logs, no nothing 

(8:13:06 PM) yohoho@jabber.ccc.de: like nothing on it 

(8:13:20 PM) yohoho@jabber.ccc.de: yeah I'm gonna wipe my shit again real soon 
(8:13:23 PM) leondavidson@jabber.org/jabber.org: ja 
(8:13:26 PM) leondavidson@jabber.org/jabber.org: yo 

(8:13:32 PM) yohoho@jabber.ccc.de: im doing full disc encryption on os x and also saving shit in 
aes disk images 


105242 


(8:13:33 PM) leondavidson@jabber.org/jabber.org: somelosers jabber is sumluzr@jabber ia? 

(8:13:36 PM) leondavidson@jabber.org/jabber.org: just confirming 

(8:13:37 PM) yohoho@jabber.ccc.de: it's slow as fuck 

(8:13:50 PM) yohoho@jabber.ccc.de: yes 

(8:13:51 PM) yohoho@jabber.ccc.de: that's him 

(8:13:55 PM) yohoho@jabber.ccc.de: he found a few more sql vuln sites 
(8:14:55 PM) leondavidson@jabber.org/jabber.org: kk 

(8:15:03 PM) leondavidson@jabber.org/jabber.org: so imma spend the night catching up 
(8:15:23 PM) leondavidson@jabber.org/jabber.org: that nigga spoofy (whitehat yes I know 
don't hate) should be giving us his research on remote nginx Oday 
(8:15:31 PM) leondavidson@jabber.org/jabber.org: if we get that 

(8:15:36 PM) leondavidson@jabber.org/jabber.org: we owning quantom amounts of shit homey 
(8:16:00 PM) yohoho@jabber.ccc.de: for real? 

(8:16:02 PM) yohoho@jabber.ccc.de: damn 

(8:16:07 PM) yohoho@jabber.ccc.de: pwn okcupid with that shit 

(8:16:12 PM) yohoho@jabber.ccc.de: lol 

(8:16:22 PM) yohoho@jabber.ccc.de: yo we really need to hit that vislink box too 

(8:16:33 PM) yohoho@jabber.ccc.de: a few new variants of that sendpage local linux root came 

out 

(8:16:37 PM) yohoho@jabber.ccc.de: but nothing worked n this box 

(8:17:21 PM) leondavidson@jabber.org/jabber.org: okcupid would be win. mad govs, mad 
security people, and hyr can sell database and get us thousands of guap for ops 
(8:17:31 PM) leondavidson@jabber.org/jabber.org: yeh 

(8:17:39 PM) leondavidson@jabber.org/jabber.org: so wait that one box with all the mailspoolz 
we lost or still got? 

(8:17:48 PM) yohoho@jabber.ccc.de: we still got it 
(8:17:51 PM) yohoho@jabber.ccc.de: but we need to root it 
(8:18:21 PM) leondavidson@jabber.org/jabber.org: kk 

(8:18:22 PM) yohoho@jabber.ccc.de: I think I was trolled by this guy who said he was PHC 

(8:18:24 PM) yohoho@jabber.ccc.de: on ire 

(8:18:27 PM) leondavidson@jabber.org/jabber.org: no good 

(8:18:32 PM) leondavidson@jabber.org/jabber.org: he didnt get any info out of you? 

(8:18:35 PM) yohoho@jabber.ccc.de: said he was working with the_ut and phe folks back in the 
day 

(8:18:37 PM) leondavidson@jabber.org/jabber.org: what name did he say he was / 

(8:18:42 PM) leondavidson@jabber.org/jabber.org: or use 

(8:18:48 PM) yohoho@jabber.ccc.de: he went by the_ut actually 

(8:18:51 PM) leondavidson@jabber.org/jabber.org: bro 

(8:18:52 PM) yohoho@jabber.ccc.de: then changed to japboy later 

(8:18:53 PM) yohoho@jabber.ccc.de: anyway 

(8:18:55 PM) leondavidson@jabber.org/jabber.org: lol 

(8:19:07 PM) leondavidson@jabber.org/jabber.org: I remember japboy 

(8:19:10 PM) leondavidson@jabber.org/jabber.org: he was a troll 

(8:19:11 PM) leondavidson@jabber.org/jabber.org: but 

(8:19:15 PM) leondavidson@jabber.org/jabber.org: I doubt its real japboy 

(8:19:21 PM) yohoho@jabber.ccc.de: he gave me a hilaarious 20 minute phone rank convo with 
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the telco 

(8:19:36 PM) yohoho@jabber.ccc.de: maybe more then 20 minutes 

(8:19:43 PM) yohoho@jabber.ccc.de: where they pretended to be a field tecnician 

(8:19:56 PM) yohoho@jabber.ccc.de: anyway 

(8:20:01 PM) yohoho@jabber.ccc.de: he said he got a whole bunch of code to give 

(8:20:11 PM) yohoho@jabber.ccc.de: he said he was going to go offline archive it and come back 

and give it up 

(8:20:13 PM) yohoho@jabber.ccc.de: disappeared 
(8:20:14 PM) yohoho@jabber.ccc.de: oh well 

(8:20:23 PM) leondavidson@jabber.org/jabber.org: yeah, we got some trolls trying to get at us 
(8:20:33 PM) yohoho@jabber.ccc.de: he seemed to know what he was talking about but whatevs 
(8:20:38 PM) yohoho@jabber.ccc.de: yeah i need to change nicks u again 

(8:20:41 PM) leondavidson@jabber.org/jabber.org: some nigga on twitter was trying to troll me 

too talking shit, said we were posers etc. claimed he was part of antisec 

(8:20:54 PM) leondavidson@jabber.org/jabber.org: crediblethreat=hot ass nick actually 

(8:21:21 PM) yohoho@jabber.ccc.de: lol yeah I know 

(8:21:23 PM) yohoho@jabber.ccc.de: lol at jax btw 

(8:21:26 PM) yohoho@jabber.ccc.de: I know a lot about her 

(8:21:32 PM) yohoho@jabber.ccc.de: and I am trying to not use recongizable shit with her 
(8:21:48 PM) yohoho@jabber.ccc.de: she is ex mil infosec 
(8:22:12 PM) leondavidson@jabber.org/jabber.org: yup 
(8:22:13 PM) leondavidson@jabber.org/jabber.org: I know 

(8:22:24 PM) leondavidson@jabber.org/jabber.org: hence why she hollas at me cause we 
scrapped before 

(8:25:12 PM) leondavidson@jabber.org/jabber.org: anyways nig I missed your gangsta ass 
(8:25:36 PM) leondavidson@jabber.org/jabber.org: if theres ever an emergency use an 
anonymous mail to send to kaZe@prvt.org 

(8:25:38 PM) leondavidson@jabber.org/jabber.org: memorize that 
(8:25:46 PM) yohoho@jabber.ccc.de: k 

(8:26:04 PM) yohoho@jabber.ccc.de: yeah it was almost getting to the point about when people 
were asking 'where did sabu go? he didnt tweet for days' 

(8:34:57 PM) leondavidson@jabber.org/jabber.org: back 

(8:35:03 PM) leondavidson@jabber.org/jabber.org: I was tweeting here and there 
(8:35:08 PM) leondavidson@jabber.org/jabber.org: honestly between us as men 
(8:35:15 PM) leondavidson@jabber.org/jabber.org: I needed to get away from comp 
(8:35:21 PM) leondavidson@jabber.org/jabber.org: fous on myself / my girl / irl 
(8:35:23 PM) leondavidson@jabber.org/jabber.org: fous 
(8:35:25 PM) leondavidson@jabber.org/jabber.org: focus 

(8:35:39 PM) leondavidson@jabber.org/jabber.org: im the type of nigga that gets extreme and 
I'll do this 20 hours a day if you leave it to me 

(8:35:58 PM) leondavidson@jabber.org/jabber.org: that reminds me 

(8:36:07 PM) leondavidson@jabber.org/jabber.org: you got the video conference of wikileaks? 
(8:36:34 PM) leondavidson@jabber.org/jabber.org: yo son you there? 

(8:36:40 PM) leondavidson@jabber.org/jabber.org: I got a hotter giving us .gov logins from 
infections 

(8:36:42 PM) leondavidson@jabber.org/jabber.org: 20:26 <V> IIE 7-9 
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I http://empleo.canalcapital.gov.co/empleos/ofert a/562312/asesor-comercial.html 

Imaryileon@hotmail.com 16736 IWOLF 1186.181.114.92 12012-02-27 15:47:54 

20:26 <V> HE 7-9 I http://empleo.canalcapital.gov.co/ Imaryileon@hotmail.com 16736 IWOLF 

1186.181.114.92 12012-02-27 

15:47:53 

20:26 <V> IFirefox 3.5/4 I http://apps3.abc.gov.ar II1234 IPC 1190.122.10.29 12012-02-27 
15:47:53 

20:26 <V> HE 7-9 I http://empleo.canalcapital.gov.co/empleos/oferta/561813/encuestador.html 
Imaryileon@hotmail.com 

13676 IWOLF 1186.181.114.92 12012-02-27 15:47:53 

20:26 <V> HE 4-6 I https://www.fna.gov.co:8081/BancaVirtual/a/login.isp 17319861 17319 
ICOLOSSUS 1190.68.65.122 
12012-02-27 15:47:53 
20:26 <V> IChrome 

I http://sac.gestionsecretariasdeeducacion.gov.co:2380/crm sed v30/index.php IJLEAL Ijleal 

IEQUIP04 

II 

20:28 <V> IChrome 

I https://www.moi.gov.sa/wps/portal/!ut/p/bl/04 Si9CPvkssyOxPLMnMzOvMAfGizOKdDAxcL 

ZOMHQOMOkxdDDw9PDz9Q8wDDAwMDPWDU POC7IdFQFOAKZs/ Ijam959920 
Ijam225544 IJASIM 
20:29 <V> Look 

20:29 <V> Page: First - Previous - Next - Last (Showing 0 - 50 of 2722 Results) 11 
20:29 <V> :P 

20:31 <V> IChrome I https ://auth.afip.gov.ar/contribuyente/ 127167122413 Imonica6666 ITC- 
AE119C1AC200 1190.11.99.223 
12012-02-27 17:28:36 

20:31 <V> HE 7-9 I https://sistemas.dnrpa.gov.ai7include/login.php 101155 IrsOl 155 
IANGELICALJV5 1186.23.17.55 
12012-02-27 17:28:19 

20:31 <V> IChrome I https ://sistemas.dnrpa.gov.ar/include/Login.php 101155 Irs01155 
IANGELICALJV 5 

(8:38:15 PM) Ieondavidson@jabber.org/905dabc35df67c05: yo 
(8:41:17 PM) Ieondavidson@jabber.org/905dabc35df67c05: yo 
(4:54:27 PM) leondavidson@jabber.org/jabber.org: yOh 
(4:54:52 PM) yohoho@jabber.ccc.de: yo what up 

(4:55:01 PM) leondavidson@jabber.org/jabber.org: you get my last msg? 

(4:55:07 PM) yohoho@jabber.ccc.de: no I missed it 

(4:55:11 PM) yohoho@jabber.ccc.de: whats happenin 

(4:55:22 PM) leondavidson@jabber.org/jabber.org: 20:26 <V> HE 7-9 

I http://empleo.canalcapital.gov.co/empleos/ofert a/562312/asesor-comercial.html 

Imaryileon@hotmail.com 16736 IWOLF 1186.181.114.92 12012-02-27 15:47:54 

20:26 <V> HE 7-9 I http://empleo.canalcapital.gov.co/ Imaryileon@hotmail.com 16736 IWOLF 

1186.181.114.92 12012-02-27 

15:47:53 
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20:26 <V> IFirefox 3.5/4 I http://apps3.abc.gov.ar II1234 IPC 1190.122.10.29 12012-02-27 
15:47:53 

20:26 <V> HE 7-9 I http://empleo.canalcapital.gov.co/empleos/oferta/561813/encuestador.html 
Imaryileon@hotmail.coni 

13676 IWOLF 1186.181.114.92 12012-02-27 15:47:53 

20:26 <V> HE 4-6 I https://www.fna.gov.co:8081/BancaVirtual/a/login.isp 17319861 17319 
ICOLOSSUS 1190.68.65.122 
12012-02-27 15:47:53 
20:26 <V> IChrome 

I http://sac.gestionsecretariasdeeducacion.gov.co:2380/crm sed v30/index.php IJLEAL Ijleal 

IEQUIP04 

II 

20:28 <V> IChrome 

I https://www.moi.gov.sa/wps/portal/!ut/p/bl/04 Si9CPvkssyOxPLMnMzOvMAfGizOKdDAxcL 

ZOMHOOMOkxdDDw9PDz9Q8wDDAwMDPWDU POC7IdFOFQAKZs/ Ijam959920 
Ijam225544 IJASIM 
20:29 <V> Fook 

20:29 <V> Page: First - Previous - Next - Fast (Showing 0 - 50 of 2722 Results) 11 
20:29 <V> :P 

20:31 <V> IChrome I https ://auth.afip. gov.ar/contribuyente/ 127167122413 Imonica6666 ITC- 
AE119C1AC200 1190.11.99.223 
12012-02-27 17:28:36 

20:31 <V> HE 7-9 I https ://sistemas.dnrpa.gov.ar/include/login.php 101155 IrsOl 155 
IANGEFICAFJV5 1186.23.17.55 
12012-02-27 17:28:19 

20:31 <V> IChrome I https://sistemas.dnrpa.gov.ar/include/Fogin.php 101155 IrsOl 155 
IANGEFICAFJV 5 

(4:56:04 PM) yohoho@jabber.ccc.de: that's some nice shit right there 
(4:57:47 PM) yohoho@jabber.ccc.de: they just giving it to us? 

(4:57:56 PM) yohoho@jabber.ccc.de: I honestly have my hands full on targets and can't get into 
some new shit 

(4:58:10 PM) yohoho@jabber.ccc.de: also not sure if you heard but JA is pissed about that 

schedule he gave us ending up in wired's hands 

(4:59:37 PM) leondavidson@jabber.org/jabber.org: has vales botted 

(4:59:52 PM) leondavidson@jabber.org/jabber.org: wo gave it to wired? 

(4:59:59 PM) yohoho@jabber.ccc.de: elche did 

(5:00:01 PM) yohoho@jabber.ccc.de: talking to him now 

(5:00:04 PM) yohoho@jabber.ccc.de: i'm a bit pissed about it 

(5:00:10 PM) yohoho@jabber.ccc.de: he was 'testing' wired or something 

(5:0l:l7PM) leondavidson@jabber.org/jabber.org: 0_0!!!!!!!! 

(5:01:27 PM) yohoho@jabber.ccc.de: yeah 

(5:01:29 PM) leondavidson@jabber.org/jabber.org: wtf is elche doing??????????????????? 

(5:01:30 PM) yohoho@jabber.ccc.de: he's like fuck JA 

(5:01:41 PM) yohoho@jabber.ccc.de: I think JA is pissed about it too 

(5:02:10 PM) yohoho@jabber.ccc.de: I mean I don't like everything JA did 

(5:02:12 PM) yohoho@jabber.ccc.de: they should have included us 
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(5:02:14 PM) yohoho@jabber.ccc.de: but 

(5:02:26 PM) yohoho@jabber.ccc.de: if there was trust issues, then us giving that to wired is 

exacly the reason why he wasn’t including us 

(5:36:OOPM) leondavidson@jabber.org/jabber.org: I mean 

(5:36:09 PM) leondavidson@jabber.org/jabber.org: I'm all like fuck JA as well 

(5:36:17 PM) leondavidson@jabber.org/jabber.org: but why is elche whoring out to media? 

(5:36:25 PM) leondavidson@jabber.org/jabber.org: if I don’t do it, and you don't do it. why is 

he? 

(5:34:20 AM) leondavidson@jabber.org/jabber.org: yo niggy 
(5:34:20 PM) leondavidson@jabber.org/jabber.org: yoooo 
(5:34:58 PM) yohoho@jabber.ccc.de: hi 
(5:35:51 PM) yohoho@jabber.ccc.de: rediblethreat;) 

* MLT has quit (A TLS packet with unexpected length was received.) 

(5:35:53 PM) yohoho@jabber.ccc.de: err sorry 
(5:35:57 PM) yohoho@jabber.ccc.de: 94.x.x.x 
(5:35:59 PM) yohoho@jabber.ccc.de: your shell server? 

(5:36:15 PM) yohoho@jabber.ccc.de: god ddos'd some loser on antisec and now he is saying it is 
your shell server 

(5:36:25 PM) leondavidson@jabber.org/jabber.org: uh, no 

(5:36:35 PM) leondavidson@jabber.org/jabber.org: I just woke up from a uber nap 
(5:36:38 PM) leondavidson@jabber.org/jabber.org: let me see 

(5:37:06 PM) leondavidson@jabber.org/jabber.org: the box I use to get on anonops = 64.* 
(5:37:19 PM) yohoho@jabber.ccc.de: it's not important 
(5:37:33 PM) yohoho@jabber.ccc.de: what else is up 

(5:37:39 PM) leondavidson@jabber.org/jabber.org: he was saying I was the loser? 

(5:37:41 PM) leondavidson@jabber.org/jabber.org: I dont get it 

(5:37:48 PM) leondavidson@jabber.org/jabber.org: nothing my nigga 

(5:37:54 PM) leondavidson@jabber.org/jabber.org: just woke up. eating cold ass pizza 

(5:37:58 PM) leondavidson@jabber.org/jabber.org: about to catch up on work 

(5:38:54 PM) yohoho@jabber.ccc.de: MLT of teampOison 

(5:38:54 PM) yohoho@jabber.ccc.de: hating 

(5:39:19 PM) leondavidson@jabber.org/jabber.org: oh yeah 

(5:39:23 PM) leondavidson@jabber.org/jabber.org: hes a little bitch ass nigga 

(5:39:27 PM) leondavidson@jabber.org/jabber.org: he sits on twitter all day 

(5:39:29 PM) leondavidson@jabber.org/jabber.org: calling us posers 

(5:39:34 PM) leondavidson@jabber.org/jabber.org: OH YOU GUYS ARENT THE REAL 

ANTISEC 

(5:39:38 PM) leondavidson@jabber.org/jabber.org: nigga no one said we were 

(5:40:12 PM) yohoho@jabber.ccc.de: some line about how our antisec team is the exact opposite 

of the 'original' antisec 

(5:40:12 PM) yohoho@jabber.ccc.de: this kid is probably in his pampers 

(5:40:42 PM) leondavidson@jabber.org/jabber.org: exactly 

(5:40:53 PM) yohoho@jabber.ccc.de: there are old schoolers involved though 

(5:41:00 PM) leondavidson@jabber.org/jabber.org: absolutely 

(5:43:30 PM) leondavidson@jabber.org/jabber.org: 
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http://www.voutube.com/watch?v=w8v71F5ttlO&feature=player embedded or youtube "Wanna 
File a Police Complaint (Arrested for Trying)" 

(5:43:36 PM) leondavidson@jabber.org/jabber.org: its crazy shit 
(5:43:47 PM) leondavidson@jabber.org/jabber.org: faggot ass cops 

(5:45:33 PM) yohoho@jabber.ccc.de: but just because there was one badass scene back then 
doesn't mean there are many scenes 

(5:45:34 PM) yohoho@jabber.ccc.de: shit they were almost all english speaking US hackers 
(5:45:34 PM) yohoho@jabber.ccc.de: and where are they now anyway 
(5:45:59 PM) leondavidson@jabber.org/jabber.org: to be onest 

(5:46:12 PM) leondavidson@jabber.org/jabber.org: many of them were raided, many of them 
are whitehats now (ironically) 

(5:46:17 PM) leondavidson@jabber.org/jabber.org: a few of them grew up and moved on 
(5:46:23 PM) leondavidson@jabber.org/jabber.org: and 1-5 of them still hack in the scene 
(5:46:52 PM) leondavidson@jabber.org/jabber.org: thus it confuses me how these lil niggas 
think its their right to even judge 

(5:46:55 PM) leondavidson@jabber.org/jabber.org: we bringing shit back 

(5:46:58 PM) leondavidson@jabber.org/jabber.org: we love the scene 

(5:47:00 PM) leondavidson@jabber.org/jabber.org: and miss it 

(5:47:05 PM) leondavidson@jabber.org/jabber.org: I know you and I do at least 

(5:47:31 PM) yohoho@jabber.ccc.de: yes 

(5:48:19 PM) leondavidson@jabber.org/jabber.org: oh yes 

(5:48:21 PM) leondavidson@jabber.org/jabber.org: regarding interpol 

(5:48:27 PM) leondavidson@jabber.org/jabber.org: http://www.pastebay.net/309852 < pass : 

AntiSec 

(5:48:36 PM) leondavidson@jabber.org/jabber.org: director of cyber crime for interpol owned 

(5:48:37 PM) leondavidson@jabber.org/jabber.org: privately 

(5:48:39 PM) leondavidson@jabber.org/jabber.org: his password etc 

(5:48:44 PM) leondavidson@jabber.org/jabber.org: only we have this 

(5:49:00 PM) yohoho@jabber.ccc.de: great 

(5:49:03 PM) yohoho@jabber.ccc.de: do we have any accoutns? 

(5:49:05 PM) yohoho@jabber.ccc.de: checking the astebin now 

(5:52:26 PM) yohoho@jabber.ccc.de: ok 

(5:59:58 PM) leondavidson@jabber.org/jabber.org: ja 

(6:00:14 PM) leondavidson@jabber.org/jabber.org: its the real deal too 

(6:14:15 PM) leondavidson@jabber.org/jabber.org: those latin raids of anons scared a few of 

our ppls 

(6:14:30 PM) leondavidson@jabber.org/jabber.org: but it looks to be mainly loic people 
(6:14:57 PM) yohoho@jabber.ccc.de: yeah 
(6:14:58 PM) yohoho@jabber.ccc.de: I imagine 

(6:14:59 PM) yohoho@jabber.ccc.de: do you know if they got into this cybercrime guy's gmail ? 
(6:15:01 PM) yohoho@jabber.ccc.de: because that would be badass 

(6:15:38 PM) leondavidson@jabber.org/jabber.org: not yet. this was passed to us to finish 

(6:15:42 PM) leondavidson@jabber.org/jabber.org: imma look at it later 

(6:15:46 PM) leondavidson@jabber.org/jabber.org: but if we can get his mail 

(6:15:47 PM) leondavidson@jabber.org/jabber.org: its win 

(6:15:56 PM) yohoho@jabber.ccc.de: he runs a website on his home network?? 
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(6:16:02 PM) yohoho@jabber.ccc.de: and this guy runs cybercrime ops ? 

(6:16:27 PM) leondavidson@jabber.org/jabber.org: ja 

(6:16:30 PM) leondavidson@jabber.org/jabber.org: google him too. its real deal 

(6:17:05 PM) yohoho@jabber.ccc.de: thinking about this DNS 

(6:17:05 PM) yohoho@jabber.ccc.de: how can we get his google apps email? 

(6:17:37 PM) leondavidson@jabber.org/jabber.org: its not a thought out plan 

(6:17:45 PM) leondavidson@jabber.org/jabber.org: if we take over his dns which it seems we 

can 

(6:17:48 PM) leondavidson@jabber.org/jabber.org: what they say is 

(6:17:56 PM) leondavidson@jabber.org/jabber.org: we redirect new mail / mx ercords to a 
rogue mail server 

(6:18:06 PM) leondavidson@jabber.org/jabber.org: and intercept new mail 
(6:18:10 PM) leondavidson@jabber.org/jabber.org: feel me? 

(6:18:18 PM) leondavidson@jabber.org/jabber.org: but it doesnt work for us as we want his old 
mail spool 

(6:18:24 PM) yohoho@jabber.ccc.de: yeah 
(6:18:25 PM) yohoho@jabber.ccc.de: but 

(6:18:27 PM) leondavidson@jabber.org/jabber.org: so we need to figure out his current 
googleapps pw 

(6:18:30 PM) yohoho@jabber.ccc.de: it will be only a handful of new email 
(6:18:34 PM) yohoho@jabber.ccc.de: probably like 'u got hacked' 

(6:49:55 PM) leondavidson@jabber.org/jabber.org: whts goodie? 

(8:08:43 PM) The following message received from yohoho@jabber.ccc.de was not encrypted: 
[yoyo] 

(8:09:03 PM) yohoho@jabber.ccc.de: 

http://www.guardian.co.uk/technology/2012/feb/27/anonymous-splinter-group-antisec-waging- 

war 

(8:09:13 PM) yohoho@jabber.ccc.de: AA this paladine mofo from privacy international 
(8:09:18 PM) yohoho@jabber.ccc.de: from projectpm 

(8:09:23 PM) yohoho@jabber.ccc.de: going to the media talking shit about us 

(8:09:25 PM) yohoho@jabber.ccc.de: arguing with him on ire now 

(8:26:01 PM) leondavidson@jabber.org/jabber.org: hes a fucking pussy 

(8:26:07 PM) leondavidson@jabber.org/jabber.org: hes trying to garner attention for himself 

(8:26:14 PM) yohoho@jabber.ccc.de: btw arguing with set hard 

(8:26:17 PM) yohoho@jabber.ccc.de: fuck this guy 

(8:26:23 PM) yohoho@jabber.ccc.de: he's talking shit about antisec now too haha 
(8:26:33 PM) leondavidson@jabber.org/jabber.org: where? 

(8:49:15 PM) leondavidson@jabber.org/jabber.org: hes a pussy 

(8:49:20 PM) leondavidson@jabber.org/jabber.org: I want to own his shit one day 

(8:52:27 PM) yohoho@jabber.ccc.de: lol yes 

(7:17:57 AM) yohoho@jabber.ccc.de: yo 

(12:53:33 PM) yohoho@jabber.ccc.de: yoyo 

(1:23:22 PM) yohoho@jabber.ccc.de: here ? 

(2:36:01 PM) leondavidson@jabber.org/jabber.org: YO 
(2:36:10 PM) leondavidson@jabber.org/jabber.org: imhere now 
(2:36:18 PM) yohoho@jabber.ccc.de: hey hey 
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(2:36:30 PM) yohoho@jabber.ccc.de: few things, we started giving ja some of the new materials 

(2:36:44 PM) yohoho@jabber.ccc.de: Colombia and Syria 

(2:36:49 PM) yohoho@jabber.ccc.de: he's now talking with elche as well 

(2:36:56 PM) leondavidson@jabber.org/jabber.org: ja? 

(2:36:57 PM) yohoho@jabber.ccc.de: so we got another perspective 
(2:37:01 PM) yohoho@jabber.ccc.de: yes 

(2:37:10 PM) yohoho@jabber.ccc.de: he verified again over twitter 
(2:37:18 PM) yohoho@jabber.ccc.de: also 

(2:37:24 PM) yohoho@jabber.ccc.de: we have a killer new whitehat target 

(2:37:31 PM) yohoho@jabber.ccc.de: these people take down botnets and shit 

(2:37:42 PM) yohoho@jabber.ccc.de: one of them was on anonops I trolled him for a minute 

(2:38:01 PM) leondavidson@jabber.org/jabber.org: if you have elche talking to JA school the 

nigga. to let go of his obsession with fucking with JA 

(2:38:08 PM) leondavidson@jabber.org/jabber.org: I had to talk to him about that leak 
(2:38:22 PM) leondavidson@jabber.org/jabber.org: especially since kevin poulsen of wired is 
trying to dox me / write a profile of me 

(2:38:30 PM) leondavidson@jabber.org/jabber.org: I dont get why anyone would hook wired up 
with info 

(2:38:40 PM) yohoho@jabber.ccc.de: yeah I on't trust them 
(2:38:45 PM) yohoho@jabber.ccc.de: quinn isn't the greatest either 
(2:38:53 PM) leondavidson@jabber.org/jabber.org: exactly.. 

(2:38:58 PM) leondavidson@jabber.org/jabber.org: elche needs to control hmself 

(2:39:01 PM) yohoho@jabber.ccc.de: but JA's over it 

(2:39:05 PM) yohoho@jabber.ccc.de: overall we helped their asses out big 

(2:39:21 PM) yohoho@jabber.ccc.de: yeah the schedule thign is pretty disturbing but no damage 

done 

(2:39:30 PM) yohoho@jabber.ccc.de: he has been overwhelmingly helpful on targets 
(2:39:35 PM) yohoho@jabber.ccc.de: I work with him closer than anyone actually 
(2:40:28 PM) yohoho@jabber.ccc.de: so yeah 

(2:40:32 PM) yohoho@jabber.ccc.de: we have work to do on this security corp 

(2:40:44 PM) yohoho@jabber.ccc.de: mail and main website is on another server, this has a lot of 

secondary shit 

(2:40:51 PM) yohoho@jabber.ccc.de: but a lot of main systems for them 
(2:41:01 PM) yohoho@jabber.ccc.de: also I have 220 or so wordpress hashes for this target 
(2:41:39 PM) leondavidson@jabber.org/jabber.org: pass hashes my way. also hyr gave me .mil 
passes to crack, been craking for a few days 

(2:41:41 PM) leondavidson@jabber.org/jabber.org: but nada on it 
(2:43:34 PM) yohoho@jabber.ccc.de: ok 

(2:43:41 PM) yohoho@jabber.ccc.de: grabbing the rest out of the sql file now 
(2:43:42 PM) yohoho@jabber.ccc.de: also 

(2:43:48 PM) yohoho@jabber.ccc.de: since you are away a bit more now 

(2:43:56 PM) yohoho@jabber.ccc.de: ask your cracking friend whether I can talk to him directly 
(2:44:00 PM) yohoho@jabber.ccc.de: so I can pass shit over quicker 

(2:44:23 PM) leondavidson@jabber.org/jabber.org: im atually back here and there but I will for 

sure hook you up with them 

(2:45:20 PM) yohoho@jabber.ccc.de: k 
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(2:45:24 PM) yohoho@jabber.ccc.de: also talk to elche about new comms 

(2:45:27 PM) yohoho@jabber.ccc.de: we have shellserver/silc again 

(2:45:35 PM) leondavidson@jabber.org/jabber.org: kk 

(2:49:02 PM) yohoho@jabber.ccc.de: https://cryptobin.org/ilb353fl pandahOhO 

(2:50:19 PM) leondavidson@jabber.org/jabber.org: got it 

(2:50:38 PM) yohoho@jabber.ccc.de: for lulz lookat cybercrime.pandasecurity.com 

(2:50:39 PM) leondavidson@jabber.org/jabber.org: L0L0L0L 

(2:50:41 PM) yohoho@jabber.ccc.de: to see what we are up against 

(2:50:43 PM) leondavidson@jabber.org/jabber.org: panda 

(2:50:44 PM) leondavidson@jabber.org/jabber.org: bro 

(2:50:57 PM) leondavidson@jabber.org/jabber.org: during unveillance hack we got access to 
panda's ftp servers 

(2:51:07 PM) leondavidson@jabber.org/jabber.org: in fact 

(2:51:18 PM) leondavidson@jabber.org/jabber.org: I had a run in with a security researcher 

from panda 5 months ago or so 

(2:51:39 PM) yohoho@jabber.ccc.de: yeah well 

(2:51:43 PM) yohoho@jabber.ccc.de: this is a good target here 

(2:51:45 PM) yohoho@jabber.ccc.de: a lot of different sites on this 

(2:51:50 PM) yohoho@jabber.ccc.de: and potentials to trojan their AV shit 

(2:51:54 PM) yohoho@jabber.ccc.de: maybe even remote update to all their AVs 

(2:51:58 PM) yohoho@jabber.ccc.de: they have a store but on another server 

(2:52:02 PM) leondavidson@jabber.org/jabber.org: mhm 

(2:52:03 PM) yohoho@jabber.ccc.de: email is on another server as well 

(2:52:26 PM) yohoho@jabber.ccc.de: these are what we have 

(2:52:28 PM) yohoho@jabber.ccc.de: total 152 

drwxrwxr-x 38 root root 4096 2012-03-01 13:03 . 

drwxrwxr-x 11 root root 4096 2009-11-09 19:51 .. 

drwx-2 popuser popuser 4096 2010-11-10 18:18 antivirus-offers.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-08-31 09:52 blog.cloudantivirus.com 

drwx-2 popuser popuser 4096 2012-02-27 11:13 cloudofficeprotection.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-02-02 09:43 cloud.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-05-25 11:39 cloudpartnercenter.pandasecurity.com 

drwxrwxr-x 2 popuser popuser 4096 2009-11-10 16:44 cloudprotection.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-04-13 13:51 cybercrime.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-10-04 09:22 facebookfriends.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-07-14 10:32 forgetsecurity.co.uk 

drwx-2 popuser popuser 4096 2011-09-29 17:28 forgetsecurity.co.za 

drwx-2 popuser popuser 4096 2011-05-18 10:19 forgetsecurity.es 

drwx-2 popuser popuser 4096 2011-11-25 09:51 go.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-06-15 11:01 info.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-06-15 11:30 information.pandasecurity.com 

drwx-2 popuser popuser 4096 2012-02-28 17:50 lavuelta.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-06-15 11:36 maintenance.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-05-17 13:48 momentos.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-08-20 13:25 ondersteuning.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-11-29 09:24 pandacompetition.pandasecurity.com 
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drwx-2 popuser popuser 4096 2012-03-01 13:03 pandaconlaroja.com 

drwx-2 popuser popuser 4096 2010-08-24 10:04 pandalabs.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-03-15 13:22 prensa.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-03-15 13:38 press.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-10-11 10:19 promo.pandasecurity.com 

drwx-2 popuser popuser 4096 2011-01-12 11:36 protectyourfamily.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-08-24 10:01 research.pandasecurity.com 

drwx-2 popuser popuser 4096 2012-02-14 09:24 securitytothecloud.pandasecurity.com 

drwxrwxr-x 2 popuser popuser 4096 2009-11-23 09:35 serviciospro.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-06-15 11:33 servicos.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-07-14 09:35 suporte.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-01-28 10:37 techcenter.pandasecurity.com 

drwx-2 popuser popuser 4096 2010-08-20 12:35 uninstall.cloudantivims.com 

drwx-2 popuser popuser 4096 2010-07-29 12:11 wiki.cloudantivirus.com 

drwx-2 popuser popuser 4096 2010-08-31 10:50 www.cnccs.es 

drwx-2 popuser popuser 4096 2011-05-25 09:35 www.forgetsecurity.de 

drwx-2 popuser popuser 4096 2011-05-25 09:40 www.forgetsecurity.se 

(2:53:25 PM) yohoho@jabber.ccc.de: yo this fool was on ire earlier today 
(2:53:29 PM) yohoho@jabber.ccc.de: I trolled him for a minute 
(2:53:32 PM) leondavidson@jabber.org/jabber.org: who 

(2:53:40 PM) yohoho@jabber.ccc.de: now that we hve this shit I will continue to get good quotes 
out of him 

(2:53:41 PM) yohoho@jabber.ccc.de: luis 

(2:53:54 PM) leondavidson@jabber.org/jabber.org: son 

(2:53:57 PM) leondavidson@jabber.org/jabber.org: this is awesome 

(2:54:14 PM) yohoho@jabber.ccc.de: they run mod_antiloris 

(2:54:17 PM) yohoho@jabber.ccc.de: FEAR 

(2:54:28 PM) leondavidson@jabber.org/jabber.org: LOL 

(2:54:33 PM) yohoho@jabber.ccc.de: there are a lot of opportunities here 

(2:54:42 PM) yohoho@jabber.ccc.de: they sell their own AV ffs 

(2:54:49 PM) yohoho@jabber.ccc.de: a cloud based something 

(2:54:57 PM) yohoho@jabber.ccc.de: we need to get source, backdoor it, release our own updates 
(2:55:19 PM) leondavidson@jabber.org/jabber.org: 1) get mails 2) get AV source codes 3) LOL 
4) find holes in their AV 

(2:55:29 PM) leondavidson@jabber.org/jabber.org: smack to their face like whoa 
(2:56:23 PM) yohoho@jabber.ccc.de: we have so many white hat targets 
(2:56:29 PM) yohoho@jabber.ccc.de: we could doa whole new zine like now if we had time 
(2:56:40 PM) leondavidson@jabber.org/jabber.org: <3<3<3<3 

(2:56:42 PM) yohoho@jabber.ccc.de: need more hackers - especially someone with trojan 
capabilities 

(2:57:13 PM) leondavidson@jabber.org/jabber.org: our niggas already on silc? 

(2:57:30 PM) yohoho@jabber.ccc.de: just me elche and jc I think for now 

(2:57:36 PM) yohoho@jabber.ccc.de: maybe they set up access for others 

(2:57:39 PM) yohoho@jabber.ccc.de: guess we need to decide who's in 

(2:57:46 PM) leondavidson@jabber.org/jabber.org: so lets do that now 

(2:57:46 PM) yohoho@jabber.ccc.de: I was saying we should get god on it since he has been 
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helping me hax lots of shit 

(2:58:03 PM) leondavidson@jabber.org/jabber.org: god and canc3r can be part of something 

(2:58:07 PM) leondavidson@jabber.org/jabber.org: we need 

(2:58:10 PM) leondavidson@jabber.org/jabber.org: main core chan 

(2:58:10 PM) yohoho@jabber.ccc.de: sumloser as well 

(2:58:13 PM) leondavidson@jabber.org/jabber.org: and secondary chan 

(2:58:16 PM) leondavidson@jabber.org/jabber.org: in secondary chan 

(2:58:18 PM) yohoho@jabber.ccc.de: yeah canc3r is a bit more rogueish I think 

(2:58:23 PM) leondavidson@jabber.org/jabber.org: we can have god canc3r value etc 

(2:58:33 PM) yohoho@jabber.ccc.de: for sure 

(2:58:43 PM) yohoho@jabber.ccc.de: even so I think we should not really discuss too much 
active URLs or targets in any chans 

(2:58:50 PM) yohoho@jabber.ccc.de: everything is need to know 
(2:58:53 PM) leondavidson@jabber.org/jabber.org: yeah 

(2:59:16 PM) leondavidson@jabber.org/jabber.org: each individual should have his own little 
project if anything 

(2:59:23 PM) leondavidson@jabber.org/jabber.org: for example if you need to drop something 
talk to value privately 

(2:59:32 PM) leondavidson@jabber.org/jabber.org: so no one knows who in the crew ddos' etc 

(3:00:14 PM) yohoho@jabber.ccc.de: yeah exactly 

(3:01:39 PM) yohoho@jabber.ccc.de: also, fredrik and blowfish 

(3:01:49 PM) yohoho@jabber.ccc.de: have both been helping me with some targets 

(3:01:55 PM) yohoho@jabber.ccc.de: shit that they brought 

(3:02:09 PM) leondavidson@jabber.org/jabber.org: but 

(3:02:10 PM) yohoho@jabber.ccc.de: they both work with revolusec 

(3:02:24 PM) leondavidson@jabber.org/jabber.org: they're newbies in the sense that they do 
stupid shit like ran to telecomex like 

(3:02:28 PM) leondavidson@jabber.org/jabber.org: OMG OMG WE HAVE SYRIAN MAILZ 

(3:02:41 PM) leondavidson@jabber.org/jabber.org: if they hang out with us 

(3:02:45 PM) leondavidson@jabber.org/jabber.org: they gotta be schooled 

(3:02:46 PM) leondavidson@jabber.org/jabber.org: like 

(3:02:51 PM) yohoho@jabber.ccc.de: yeah 

(3:02:55 PM) yohoho@jabber.ccc.de: well same for god too 

(3:02:55 PM) leondavidson@jabber.org/jabber.org: dont tell anyone you hang out with us 

(3:02:59 PM) leondavidson@jabber.org/jabber.org: ja 

(3:03:07 PM) yohoho@jabber.ccc.de: yeah basic security culture shit 

(3:03:09 PM) leondavidson@jabber.org/jabber.org: someloser is definitely in the core chan 
(3:03:19 PM) yohoho@jabber.ccc.de: I have somloser working actively on nypd emails 
(3:03:20 PM) yohoho@jabber.ccc.de: dumping shit 

(3:03:26 PM) yohoho@jabber.ccc.de: so when he finishes that list we can do a release 

(3:03:31 PM) yohoho@jabber.ccc.de: but that will still take lots of time 

(3:03:43 PM) leondavidson@jabber.org/jabber.org: how many cops' mails we got so far? 

(3:03:44 PM) leondavidson@jabber.org/jabber.org: and 

(3:03:53 PM) yohoho@jabber.ccc.de: not many I haven’t been dumping any 

(3:04:00 PM) leondavidson@jabber.org/jabber.org: on some rel shit I love it 

(3:04:03 PM) leondavidson@jabber.org/jabber.org: I fucking hate the nypd 
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(3:04:29 PM) yohoho@jabber.ccc.de: yes 

(3:04:34 PM) yohoho@jabber.ccc.de: this is our next major target 

(3:04:42 PM) yohoho@jabber.ccc.de: we have epic CCs and can do another round of that shit 

(3:04:50 PM) yohoho@jabber.ccc.de: but we mostly need to dig up the dirt 

(3:05:03 PM) yohoho@jabber.ccc.de: some explosive dirt on NYPD can really set off a major 

panic 

(3:05:14 PM) yohoho@jabber.ccc.de: especially because they are under heat for illegally spying 
on muslims 

(3:05:19 PM) yohoho@jabber.ccc.de: and several recent police shootings 
(3:05:32 PM) yohoho@jabber.ccc.de: not to mention kicking out OWS 
(3:09:42 PM) yohoho@jabber.ccc.de: ok yeah pass on them hashes 
(3:09:47 PM) yohoho@jabber.ccc.de: need to dump their mail 

(3:10:22 PM) leondavidson@jabber.org/jabber.org: you got the table schema for that first set of 
hashes? 

(3:11:36 PM) yohoho@jabber.ccc.de: CREATE TABLE 'wp_users' ( 

'ID' bigint(20) unsigned NOT NULL auto_increment, 

' user login' varchar(60) NOT NULL default", 

'user_pass' varchar(64) NOT NULL default", 

'user_nicename' varchar(50) NOT NULL default", 

'user_email' varchar(lOO) NOT NULL default", 

'user_url' varchar(lOO) NOT NULL default", 

'user_registered' datetime NOT NULL default '0000-00-00 00:00:00', 

'user_activation_key' varchar(60) NOT NULL default", 

'user_status' int( 11) NOT NULL default ’O’, 

'display_name' varchar(250) NOT NULL default", 

PRIMARY KEY ('ID'), 

KEY 'user_login_key' ('user_login'), 

KEY 'user_nicename' ('user_nicename') 

) ENGINE=MyIS AM AUTO_INCREMENT=266 DEFAULT CHARSET=utf8; 

(3:11:39 PM) yohoho@jabber.ccc.de: theyare msotly these 
(3:l3:OOPM) leondavidson@jabber.org/jabber.org: nah 
(3:13:16 PM) yohoho@jabber.ccc.de: oh the other one 
(3:13:16 PM) yohoho@jabber.ccc.de: 1 sec 

(3:13:18 PM) leondavidson@jabber.org/jabber.org: INSERT INTO 'user' VALUES 
(1,’Bustamante’,",':B:0fa3d203:7b5e6758f65b4856daa379889f6af6fa',':B:748c097b:0da47b929cc 
26cfcf23e4dl2a02514de','20110419180959','pedro.bustamante@pandasecurity.com',",'20120122 
202128','c 112139d05e0013b41 lba348a892c457',NULL,’d3ddebce0e62b01 al 8395dd0e6535ad7’, 
'20100805212501','20100729161610',22), 

(3:13:19 PM) leondavidson@jabber.org/jabber.org: ja 

(3:13:22 PM) leondavidson@jabber.org/jabber.org: that one is confusing 

(3:13:40 PM) yohoho@jabber.ccc.de: — 

CREATE TABLE 'user' ( 

'user_id' int(10) unsigned NOT NULL auto_increment, 

'user_name' varbinary(255) NOT NULL default", 

'user_real_name' varbinary(255) NOT NULL default", 

'user_password' tinyblob NOT NULL, 
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'user_newpassword' tinyblob NOT NULL, 

' user_newpass_ti me' binary(14) default NULL, 

'user_emaiT tinyblob NOT NULL, 

'user_options' blob NOT NULL, 

'user_touched' binary(14) NOT NULL default ’\0\0\0\0\0\0\0\0\0\0\0\0\0\0’, 
'user_token' binary(32) NOT NULL default 
’\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0’, 
'user_email_authenticated' binary(14) default NULL, 

' useremailtoken' binary(32) default NULL, 

'user_email_token_expires' binary(14) default NULL, 

' userregistration' binary(14) default NULL, 

' usereditcount' int(l 1) default NULL, 

PRIMARY KEY ('userjd'), 

UNIQUE KEY 'user_name' ('user_name'), 

KEY 'user email token' ('user_email_token') 

) ENGINE=InnoDB DEFAULT CHARSET=binary; 


(3:14:32 PM) yohoho@jabber.ccc.de: also 

(3:14:35 PM) yohoho@jabber.ccc.de: if you can get these 

(3:14:35 PM) yohoho@jabber.ccc.de: 

vip_acces s: wcGpEx410kwb2 wcGpEx410kwb2: dbr9 

barwell: 7 tH J1 OoLTj P. E 

gigawave:MfZ6diafNXkBY 

gigawave:uOAlSYxj5JzOI 

(3:14:37 PM) yohoho@jabber.ccc.de: for another site 

(3:14:38 PM) yohoho@jabber.ccc.de: more important 

(3:14:47 PM) yohoho@jabber.ccc.de: not sure if I gave you these already 

(3:14:53 PM) yohoho@jabber.ccc.de: that first one vip_access is cracked already 

(3:17:24 PM) yohoho@jabber.ccc.de: Anonymous has of course reacted, and has started DDoS 

attacks against a number of different websites, among the targets we can find the Department of 

Justice, the RIAA, and Universal Music. Again, the best way Anonymous is able to come up 

with is to launch DDoS attacks. They could try to give information to the people, etc. but that is 

boring for them, it is way funnier to break the law. 

(3:17:26 PM) yohoho@jabber.ccc.de: this is that luis 

(3:17:34 PM) yohoho@jabber.ccc.de: on his blog @ http://pandalabs.pandasecurity.com/ 

(3:17:38 PM) yohoho@jabber.ccc.de: which we owned 
(3:19:19 PM) leondavidson@jabber.org/jabber.org: funny 

(3:21:07 PM) leondavidson@jabber.org/jabber.org: hopefully this leads to other whitehats 
getting owned 

(3:21:23 PM) yohoho@jabber.ccc.de: nothing on this server really 
(3:21:26 PM) yohoho@jabber.ccc.de: we need to get into them mails 
(3:32:31 PM) yohoho@jabber.ccc.de: also 
(3:33:30 PM) leondavidson@jabber.org/jabber.org: ja 
(3:33:53 PM) yohoho@jabber.ccc.de: got another good hash DB 
(3:34:01 PM) yohoho@jabber.ccc.de: ostly banks 
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(3:34:03 PM) leondavidson@jabber.org/jabber.org: pass it over 

(3:34:03 PM) yohoho@jabber.ccc.de: and others 

(3:34:24 PM) yohoho@jabber.ccc.de: ok gimme a minute 

(3:34:28 PM) yohoho@jabber.ccc.de: uploading the raw sql now 

(3:34:34 PM) yohoho@jabber.ccc.de: but have to parse it out for the inserts 

(3:35:18 PM) leondavidson@jabber.org/jabber.org: 

http://www.politico.com/news/stories/0312/73493.html = crazy that breitbart died, he was 
recently very anti-anon and attacking ows 
(3:36:45 PM) yohoho@jabber.ccc.de: yeah 

(3:36:48 PM) yohoho@jabber.ccc.de: oh I know all about that fool 

(3:36:51 PM) yohoho@jabber.ccc.de: glad he’s dead 

(3:41:16 PM) leondavidson@jabber.org/jabber.org: ja 

(3:53:25 PM) yohoho@jabber.ccc.de: also 

(3:53:41 PM) yohoho@jabber.ccc.de: admin:OVzbQFy.qKfTw 

leyre:bmJIHPaUx097Y 

germany: Ecs 01 IiHtoB QM 

testing: lHrrP 1 ibhmfYE 

pandasweden:MWB vdAZ 1 KsM4U 

m33tingp0int:iZXU4HZ/CDUe6 

betalivetes t: v Jh 1QU sn J1 dB I 

(3:54:33 PM) yohoho@jabber.ccc.de: I will ahve to sort out the hashes from the other site later 

(3:54:39 PM) yohoho@jabber.ccc.de: unless you want to do it yourself form the larger DB 

(3:54:43 PM) yohoho@jabber.ccc.de: which is on 91 now 

(3:57:28 PM) leondavidson@jabber.org/jabber.org: sounds good 

(3:58:33 PM) yohoho@jabber.ccc.de: it's for another bigass fucking target 

(3:58:42 PM) yohoho@jabber.ccc.de: gsmiweb.com 

(3:58:49 PM) yohoho@jabber.ccc.de: 41+ spools, mostly bank user lists 

(3:58:56 PM) yohoho@jabber.ccc.de: it's sort of another stratfor it seems 

(3:59:05 PM) yohoho@jabber.ccc.de: probably mad CCs too 

(4:05:50 PM) yohoho@jabber.ccc.de: any of them crack yet ? 

(4:05:58 PM) yohoho@jabber.ccc.de: I found their mail login 

(4:06:37 PM) leondavidson@jabber.org/jabber.org: sme of these security people are lol 

(4:06:43 PM) leondavidson@jabber.org/jabber.org: one password is "usa" another 123456 

(4:06:44 PM) leondavidson@jabber.org/jabber.org: lol 

(4:06:52 PM) yohoho@jabber.ccc.de: lol 

(4:06:54 PM) yohoho@jabber.ccc.de: what morons 

(4:07:08 PM) leondavidson@jabber.org/jabber.org: he’ll give me the cracked pws in a few 
(4:07:11 PM) yohoho@jabber.ccc.de: yeah they reused ftp passies as well 
(4:07:22 PM) yohoho@jabber.ccc.de: k no hurry, may as well let it run for a bit 
(4:07:28 PM) leondavidson@jabber.org/jabber.org: ja 

(4:07:34 PM) yohoho@jabber.ccc.de: was just curious if there was a small handful ready now so I 
can test it against imap or webmail 
(4:08:15 PM) yohoho@jabber.ccc.de: btw 

(4:08:30 PM) yohoho@jabber.ccc.de: they busted _another_ greek hacker 
(4:08:32 PM) leondavidson@jabber.org/jabber.org: nothing impressive yet brother 
(4:08:34 PM) leondavidson@jabber.org/jabber.org: you serious? 
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(4:08:37 PM) yohoho@jabber.ccc.de: who helped with the 2nd defacement 
(4:08:41 PM) yohoho@jabber.ccc.de: yes 

(4:08:43 PM) yohoho@jabber.ccc.de: 16 year old kid apparently 

(4:08:43 PM) leondavidson@jabber.org/jabber.org: where are they finding these hackers from? 
(4:08:45 PM) leondavidson@jabber.org/jabber.org: snitces? 

(4:08:46 PM) leondavidson@jabber.org/jabber.org: or? 

(4:08:47 PM) yohoho@jabber.ccc.de: who talked to me _once_ on ire 
(4:08:58 PM) yohoho@jabber.ccc.de: he was using cyberghost vpn 
(4:09:09 PM) yohoho@jabber.ccc.de: apparently they know me by nick now 
(4:09:19 PM) leondavidson@jabber.org/jabber.org: no good 
(4:09:46 PM) yohoho@jabber.ccc.de: no 

(4:09:47 PM) yohoho@jabber.ccc.de: something weird is going on 

(4:09:55 PM) yohoho@jabber.ccc.de: I am curious as to whether PMs on anonops are bugged 
(4:10:01 PM) yohoho@jabber.ccc.de: I am trying to trace how they could have gotten him 
(4:10:10 PM) yohoho@jabber.ccc.de: now they grabbed his HD and they found everything 
apparently 

(4:10:11 PM) yohoho@jabber.ccc.de: he is out now 
(4:10:15 PM) yohoho@jabber.ccc.de: he was talking to me about it 
(4:11:48 PM) leondavidson@jabber.org/jabber.org: wtf 
(4:12:01 PM) leondavidson@jabber.org/jabber.org: questions: 

(4:12:11 PM) leondavidson@jabber.org/jabber.org: 1) did they know you before they found him 
and did they ask him about you 

(4:12:14 PM) leondavidson@jabber.org/jabber.org: or did he tell them about you 
(4:12:20 PM) leondavidson@jabber.org/jabber.org: or did they find logs of him and you 
(4:12:35 PM) leondavidson@jabber.org/jabber.org: 2) how the fuck did they find him? did you 
speak to him publicly in chat? or private messages only? 

(4:13:33 PM) yohoho@jabber.ccc.de: I only talked to him throguh PMs like once or twice 

(4:13:54 PM) yohoho@jabber.ccc.de: and whether they knew me or not, well they probably did, 

becuas el was talking to two of the others throuh anonops ire 

(4:13:57 PM) yohoho@jabber.ccc.de: and they probably said whats up 

(4:18:57 PM) leondavidson@jabber.org/jabber.org: my opinion my nigga 

(4:19:02 PM) leondavidson@jabber.org/jabber.org: is that those PMs are being sniffed 

(4:24:18 PM) leondavidson@jabber.org/jabber.org: 

none:$P$BwPDWbJVNue5Pt5e816kUhSwt5rCGgl:changeme 

luis.fernandes@pt.pandasecurity.com:$P$BO86h3BAMTqGTFh5/8wSgllyPflg6o0:123456 

inaki.gorostiza@pandasecurity.com:$P$B2VWc6tHoMewvf48bSXqtEhJrlsDKr.:murrieta 

lcorrons@pandasecurity.com:$P$Bh3qV7MSJoi5tqhnkHCt3cxUEMNiX8/:SeanPaul 

inaki.gorostiza@pandasecuity.com:$P$BJG6Ks8fCkpnIDAx4DdSeKsdl0uPcb.:murrieta 

none:$P$BwPDWbJVNue5Pt5e816kUhSwt5rCGgl:changeme 

gregor.respondek @ de. pandasecurity .com: $P$B o6PWYhVqnJE 1 PFRWqadsLTFpcn 1 i8.: trustno 1 
markus.bannasch@de.pandasecurity.com:$P$Bf5rcpp3hMZRSFZGBYIhu5qEcwuieol:bonnyl2 
34 

dino.serci@de.pandasecurity.com:$P$BgWARlYaT7FOe7whyqWOfFCHQulejQ/:raziel 

dummy@de.pandasecurity.com:$P$BaGQqId35MLvivN6xsijpxmpbYTndv/:testl010 

zhao.wang@cn.pandasecurity.com:$P$BYbLrRjhofPaOolOXvnNTWVeJNrG7a.:800718 

ruben.munoz@pandasecurity.com:$P$BKYx2Uu4nEw38xlwkWKpPvmbzNGsASl:Pa$$w0rd 
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josemanuel.bernal@pandasecurity.com:$P$Bs3E7bJ5ALw4KkYM/3wUvSg5ybPhVk.:yourself 

matti.paala@fi.pandasecurity.com:$P$Bp4hsBPByRBGwt.iBnwqYpwzZWSxVil:perkele3 

roberto.femandez@pandasecurity.com:$P$B4Lj5YyGJyZWMVvEIoMDYOseUm617..: 160272 

jorge.torre@pandasecurity.com:$P$Bjj2Vzf2PFkkuQQdzUg2x7tyICZRa//:mcgyver 

alberto.dominguez@pandasecurity.com:$P$BJxP7BW8DUFpH45P140WLwkMpWeJDrl:albert 

ini 

inigo.trevilla@pandasecurity.com:$P$BNpklxuO435CA19KuvQDL4O3CelaTk0:131297 
louis.bayron@us.pandasecurity.com:$P$BwpYGtdmLndI9jF9AGLSX21nAkplZ70:Letmeinl 
noemi.macho@pandasecurity.com:$P$B7vzWKEuBij0TA4hgRk.V4vjOFz/LA.:panda001 
bram.deblander@be.pandasecurity.com:$P$B.43ifGHXBUUlUsQxwcDdiMWqon2RUl: vikings 
cedric. lemaire@be.pandasecurity.com:$P$BzVlzJXx/fWhmQ5/MegX5YwZmDzMi80:Azerty0 
1 

cristian.vigara@pandasecurity.com:$P$BObs0J8Z8Co.SAAx01sFQnad51.hcl.:cristian 

waseem.hafiz@uk.pandasecurity.com:$P$BALI5zEv5XHJPffZR9Yj5Eh71upgGq0:Scarfac3 

piotr.olewniczak@pl.pandasecurity.com:$P$BcaHYPlEY0qeTfNPcnw9PFPEkXsS8Wl:Haslol 

23 

XXXbart.jult@be.pandasecurity.com:$P$Bv8Iyd4Ddg7xvvu2G17w4K31isqoqxl:testl23 

zacharias.papazacharias@cy.pandasecurity.com:$P$BHmvlZ.OjLAcARR2ef.dnFAqcaNPZnO:p 

anda2010 

marcelo.pizani@ar.pandasecurity.com:$P$B7QzinI0qT9PLkkA5wlsVAS7ATSvoD/:marcelo 

yokemon@pandasecurity.com.my:$P$BZrx/w9i/y9so8/qRyOEaP2n3gNb.Wl:qwel23 

cesar.zavala@bo.pandasecurity.com:$P$BnrzyO.MlNe3on2jljcNfdh6UNJhInO:mclover 

joyce.prado@pandasecurity.com.br:$P$BiLpyUGmx2Gdd8O4HlXxqgRSwRu.LE0:22112005 

alaa.shamseddine@ca.pandasecurity.com:$P$BFLSTimpJkOOolLo8qhP/34XKk8Mel.:Motherl 

eduardo.guzman@mx.pandasecurity.com:$P$B.y4eiX9z3md3b0Yt5PTW0gq/8OGX81:nancy20 

10 

aaron.piller@uk.pandasecurity.com:$P$B9Y5f8wC9KvFgx0niQI04i8GOseFGt/:jesusl2 

juan.echeita@pandasecurity.com:$P$Bm7LHsuZ.nYs4N/S37Ze0m47wnSzYG0:panda2010 

ericka.hernandez@cr.pandasecurity.com:$P$BAafj0jFlQvNMLCKalwD2jtqLia0Tj/:abrego 

antonio.rodriguez@mx.pandasecurity.com:$P$Bg/NA.MK/qMKCiKU.witnrECYLQoQS/:entrar 

joao.lourenco@pt.pandasecurity.com:$P$BvXEChYC17.0o9JGHHby4y2BYersI7/:software 

andrey.resler@ru.pandasecurity.com:$P$BMcAAP8If6S6FIRCHpzgcxfqvBs35b/:sparta22 

usa@usa.com:$P$BMUlUhmz9tJ6XgVZOdtVOGLAgk2Zxo.:usa 

inaki.gorostiza@pandasecurity.com:$P$BYa9ory26auHyneZFBuQTJz7zn.WK51:12345678 
usa@usa.com:$P$BMUlUhmz9tJ6XgVZOdtVOGLAgk2Zxo.:usa 
josu@novisline.com:$P$B4EYQEU8CNTmA13GLlah9oXLD.f/Kdl: 12345678 
(4:25:48 PM) leondavidson@jabber.org/jabber.org: bro you see these passwords? 

(4:25:50 PM) leondavidson@jabber.org/jabber.org: lol 

(4:31:05 PM) leondavidson@ jabber.org/jabber.org: Ecs01IiHtoBQM:germanyl 

lHrrP 1 ibhmfYE: live 123 

7 tH J1 OoLTj P. E: sponsors 

bmJIHPaUx097Y: test 1010 

MfZ6diafNXkBY :livestre 

wcGpEx410kwb2:dbr9 

uOAlSYxj5JzOI:co62ns 
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(4:31:14 PM) leondavidson@jabber.org/jabber.org: wcGpEx410kwb2 = dbr9 

(4:32:08 PM) yohoho@jabber.ccc.de: one more user5:N_CosHLo04pDQ 

(4:38:22 PM) yohoho@jabber.ccc.de: some of those smaller hashes 

(4:38:23 PM) yohoho@jabber.ccc.de: are for vislink 

(4:38:25 PM) yohoho@jabber.ccc.de: passes I haven't had yet 

(4:38:28 PM) yohoho@jabber.ccc.de: so this could be good 

(4:38:39 PM) yohoho@jabber.ccc.de: if one doubles for local gigawave user I think the sudoedit 
exploit will work 

(4:39:04 PM) leondavidson@jabber.org/jabber.org: ja 

(4:39:22 PM) yohoho@jabber.ccc.de: yo also 

(4:39:25 PM) yohoho@jabber.ccc.de: some weird shit just happened 

(4:39:31 PM) yohoho@jabber.ccc.de: someone logged in as crediblethreat 

(4:39:36 PM) yohoho@jabber.ccc.de: spammed some facebook link 

(4:39:39 PM) yohoho@jabber.ccc.de: on many channels 

(4:39:40 PM) leondavidson@jabber.org/jabber.org: wait 

(4:39:42 PM) yohoho@jabber.ccc.de: got sop on #antisec 

(4:39:46 PM) yohoho@jabber.ccc.de: talking to opers right now 

(4:39:47 PM) leondavidson@jabber.org/jabber.org: they actually logged into your account? 
(4:39:52 PM) yohoho@jabber.ccc.de: yes 

(4:39:56 PM) leondavidson@jabber.org/jabber.org: I told these faggots 

(4:40:01 PM) leondavidson@jabber.org/jabber.org: that htp claims to have hacked them again 
(4:40:07 PM) leondavidson@jabber.org/jabber.org: they dont believe it because they are 
ARROGANT 

(4:40:15 PM) leondavidson@jabber.org/jabber.org: but if they are hacked it explains how your 
password got used 

(4:40:29 PM) yohoho@jabber.ccc.de: yes 

(4:40:42 PM) leondavidson@jabber.org/jabber.org: incredible 

(4:41:15 PM) leondavidson@jabber.org/jabber.org: 

http://washington.cbslocal.com/2012/03/01/nasa-laptop-stolen-with-command-codes-that- 

control-space-station/ 

(4:41:17 PM) leondavidson@jabber.org/jabber.org: fun 
(4:41:43 PM) yohoho@jabber.ccc.de: lolol 
(4:47:58 PM) leondavidson@jabber.org/jabber.org: 
https://www.npr.org/templates/story/storv.php?storyId=147695561 

(4:48:03 PM) leondavidson@jabber.org/jabber.org: interesting my nigga 

(4:48:18 PM) leondavidson@jabber.org/jabber.org: some people saying those 25 arrested (and 

coincidentally they were all spanish-speaking) 

(4:48:25 PM) leondavidson@jabber.org/jabber.org: was the work of infiltration / a rogue anon 
site 

(4:48:32 PM) yohoho@jabber.ccc.de: anon2world ? 

(4:48:34 PM) leondavidson@jabber.org/jabber.org: "anonworld.info" I never even heard of it 
(4:48:44 PM) yohoho@jabber.ccc.de: hrmmm me neither 

(4:49:02 PM) leondavidson@jabber.org/jabber.org: this entire scene needs to really fucking step 
up their game and trust no one. and no sites, no orgs 

(5:00:57 PM) yohoho@jabber.ccc.de: http://www.consternation.us/2012/02/hundreds-of-twitter- 
users-identified-as.html 
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(5:00:57 PM) yohoho@jabber.ccc.de: yo 

(5:01:01 PM) yohoho@jabber.ccc.de: these mofos 

(5:01:03 PM) yohoho@jabber.ccc.de: need to get hit haha 

(5:01:09 PM) yohoho@jabber.ccc.de: they have the most ridiculous website 

(5:03:09 PM) leondavidson@jabber.org/jabber.org: "Consternation Security" 

(5:03:14 PM) leondavidson@jabber.org/jabber.org: another charlatan ass security company 

(5:03:17 PM) leondavidson@jabber.org/jabber.org: trying to get free publicity 

(5:05:01 PM) yohoho@jabber.ccc.de: their sole purpose is to fuck with us 

(5:05:03 PM) yohoho@jabber.ccc.de: us specifically 

(5:05:09 PM) yohoho@jabber.ccc.de: " 

The hacker group Anonymous is now discussing what to do with the information they have 
obtained from the Prison Database stolen from GEO Group, some have discussed staging a 
hack against the Prison system where the Hackers would open all doors and gates to the 
facility, once power has been disabled, they would target backup power systems to prevent the 
doors from being closed." 

(5:05:32 PM) leondavidson@jabber.org/jabber.org: sounds like a good plan whats their issue 
with it? 

(5:05:33 PM) leondavidson@jabber.org/jabber.org: LOL 

(5:06:19 PM) yohoho@jabber.ccc.de: lolol 

(5:06:23 PM) yohoho@jabber.ccc.de: nah this is consernation 

(5:07:43 PM) leondavidson@jabber.org/jabber.org: they're hosting their domain on blogspot 

(5:07:50 PM) leondavidson@jabber.org/jabber.org: straight up pussy move 

(5:07:55 PM) yohoho@jabber.ccc.de: smart of them 

(5:07:59 PM) leondavidson@jabber.org/jabber.org: their feed = 

http://www.consternation.us/feeds/posts/default7orderby-updated 

(5:08:27 PM) leondavidson@jabber.org/jabber.org: their email cnationsec@gmail.com isn't 
used anywhere else as far as I see 

(5:08:36 PM) leondavidson@jabber.org/jabber.org: funny how its located in texas 

(5:08:46 PM) leondavidson@jabber.org/jabber.org: would be funnier if its put together by some 

stratfor IT lackey 

(5:08:51 PM) leondavidson@jabber.org/jabber.org: or some redneck faggot 
(5:10:51 PM) leondavidson@jabber.org/jabber.org: ok 
(5:10:54 PM) leondavidson@jabber.org/jabber.org: I know who this guy is 
(5:10:58 PM) leondavidson@jabber.org/jabber.org: just figured it all out 
(5:11:11 PM) yohoho@jabber.ccc.de: for real 

(5:11:21 PM) leondavidson@jabber.org/jabber.org: he's an old efnet kid named Zippie 
(5:11:36 PM) leondavidson@jabber.org/jabber.org: he fucked up by posting bratty's dox 
(5:11:40 PM) leondavidson@jabber.org/jabber.org: 

http ://www.consternation .us/2012/02/bratty-dox.html 

(5:11:51 PM) leondavidson@jabber.org/jabber.org: he's the only one that hates both me (sabu) 
and bratty (aka @ bitchiest) 

(5:11:58 PM) leondavidson@jabber.org/jabber.org: even though bitchiest is more my enemy 
and a fed bitch 

(5:12:00 PM) yohoho@jabber.ccc.de: is he troll 

(5:12:02 PM) leondavidson@jabber.org/jabber.org: yes 

(5:12:04 PM) leondavidson@jabber.org/jabber.org: hes troll faggot 
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(5:12:12 PM) yohoho@jabber.ccc.de: so not actually government plan 

(5:12:15 PM) leondavidson@jabber.org/jabber.org: nein 

(5:12:18 PM) leondavidson@jabber.org/jabber.org: but hes a snitch 

(5:12:25 PM) leondavidson@jabber.org/jabber.org: he’d probably forwarded IPs logged down 
to feds 

(5:12:25 PM) leondavidson@jabber.org/jabber.org: now 
(5:12:39 PM) yohoho@jabber.ccc.de: ah k 

(5:12:46 PM) leondavidson@jabber.org/jabber.org: what we need to do is probably be more 
proactive or push someone to educate anons as a whole with little pastebin releases explaining 
stupid shit like 

(5:12:53 PM) leondavidson@jabber.org/jabber.org: don’t click on pastehtml's or urls you dont 
trust 

(5:13:01 PM) leondavidson@jabber.org/jabber.org: because they're most likely bugged 
(5:13:06 PM) yohoho@jabber.ccc.de: of course not 
(5:13:07 PM) yohoho@jabber.ccc.de: I never do 

(5:13:13 PM) leondavidson@jabber.org/jabber.org: thats what I mean 

(5:13:16PM) yohoho@jabber.ccc.de: or if Ido, it's through tor 

(5:13:18 PM) leondavidson@jabber.org/jabber.org: the rest of anons ... :/ 

(5:13:38 PM) leondavidson@jabber.org/jabber.org: I click on pastehtmls from my bs vpn's and 
like to find the XSS feds use 

(5:13:39 PM) leondavidson@jabber.org/jabber.org: an ddos them 

(5:13:41 PM) leondavidson@jabber.org/jabber.org: in fact 

(5:13:42 PM) leondavidson@jabber.org/jabber.org: get his 

(5:13:50 PM) leondavidson@jabber.org/jabber.org: some months ago that guy 

@anontangodown hits me up 

(5:13:51 PM) leondavidson@jabber.org/jabber.org: like 

(5:13:58 PM) leondavidson@jabber.org/jabber.org: omg someone posted my dox 
(5:14:10 PM) leondavidson@jabber.org/jabber.org: heres the url: pastehtml url ensues etc 
(5:14:24 PM) leondavidson@jabber.org/jabber.org: I say lol ok. download it. grab the source, 
find a XSS pointing to providesecurity.com 

(5:14:37 PM) leondavidson@jabber.org/jabber.org: and theres an IP logger there waiting for me 
(5:14:42 PM) leondavidson@jabber.org/jabber.org: you know what bugs me? 

(5:14:58 PM) leondavidson@jabber.org/jabber.org: why these people are so fucking stuck on 
getting us arrested, like, being little snitch bithes 

(5:15:08 PM) leondavidson@jabber.org/jabber.org: what do you get out of it? 

(5:15:18 PM) yohoho@jabber.ccc.de: Skicka en lank for aterstallning av losenord till min 
aterstallningsadress: {•••••••••e@gmail.com 

(5:15:22 PM) yohoho@jabber.ccc.de: is his password recovery email 
(5:15:27 PM) yohoho@jabber.ccc.de: for that cnationsec@gmail 
(5:15:32 PM) leondavidson@jabber.org/jabber.org: oh Swedish? 

(5:15:34 PM) leondavidson@jabber.org/jabber.org: or nl 
(5:15:40 PM) yohoho@jabber.ccc.de: well that is just tor node 
(5:15:44 PM) leondavidson@jabber.org/jabber.org: oh ja 
(5:15:45 PM) yohoho@jabber.ccc.de: google autodetecting 
(5:15:48 PM) leondavidson@jabber.org/jabber.org: yeah true 
(5:15:52 PM) leondavidson@jabber.org/jabber.org: lol 
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(5:19:08 PM) yohoho@jabber.ccc.de: hrm 

(5:19:13 PM) yohoho@jabber.ccc.de: testing a few of these panda passies 
(5:19:15 PM) yohoho@jabber.ccc.de: none worked yet 

(5:19:23 PM) yohoho@jabber.ccc.de: imap/pop3/webmail @ https://mep.pandasecurity.com/ 
(5:32:20 PM) yohoho@jabber.ccc.de: well 

(5:32:20 PM) yohoho@jabber.ccc.de: tht guy is claiming to be the owner 

(5:32:20 PM) yohoho@jabber.ccc.de: on ire 

(5:32:20 PM) yohoho@jabber.ccc.de: named green 

(5:32:20 PM) yohoho@jabber.ccc.de: in #antisec 

(5:34:46 PM) leondavidson@jabber.org/jabber.org: owner of panda? 

(5:35:08 PM) yohoho@jabber.ccc.de: no 

(5:35:12 PM) yohoho@jabber.ccc.de: owner of consernation 

(5:35:47 PM) leondavidson@jabber.org/jabber.org: ya 

(5:36:07 PM) leondavidson@jabber.org/jabber.org: lulzcart is another one for secondary 
(5:36:14 PM) leondavidson@jabber.org/jabber.org: he's been doing good things for #romania 
(5:36:26 PM) yohoho@jabber.ccc.de: yes lulzcart is badass 
(5:36:33 PM) yohoho@jabber.ccc.de: we've chatted 
(5:37:01 PM) leondavidson@jabber.org/jabber.org: ja 

(7:35:11 PM) leondavidson@jabber.org/jabber.org: I just got the weirdest convo going on 
(7:35:13 PM) yohoho@jabber.ccc.de: yoyo 
(7:35:15 PM) yohoho@jabber.ccc.de: yeh? 

(7:35:19 PM) leondavidson@jabber.org/jabber.org: someone randomly added me on jabber 
(7:35:22 PM) leondavidson@jabber.org/jabber.org: then they sent me a message 
(7:35:23 PM) yohoho@jabber.ccc.de: btw they ut this out 

(7:35:23 PM) yohoho@jabber.ccc.de: http://wikileaks.org/gifiles/releasedate/2012-03-Q2-01- 
stratfor-occupy.html 

(7:39:28 PM) yohoho@jabber.ccc.de: what else? 

(7:43:05 PM) leondavidson@jabber.org/jabber.org: oh 

(7:43:07 PM) leondavidson@jabber.org/jabber.org: it was just weird 

(7:43:11 PM) leondavidson@jabber.org/jabber.org: sec 

(7:43:27 PM) leondavidson@jabber.org/jabber.org: (6:23:29 PM) 

anonpik@jabber.ccc.de/17328374231330644165595098: Hello 

(6:25:04 PM) leondavidson@jabber.org/jabber.org: ? 

(6:33:12 PM) anonpik@jabber.ccc.de: Please bear with me for a few minutes 
(6:34:34 PM) leondavidson@jabber.org/jabber.org: ok.. 

(6:41:17 PM) anonpik@jabber.ccc.de: An interesting document is uploading now. 

(6:44:13 PM) leondavidson@jabber.org/jabber.org: ok 
(6:52:12 PM) anonpik@jabber.ccc.de: Have you seen this? 

(6:52:14 PM) anonpik@jabber.ccc.de: http://pastie.org/private/lobiragpzhnzspoewsdqdw 
(7:05:01 PM) anonpik@jabber.ccc.de: Did you get that? 

(7:12:34 PM) anonpik@jabber.ccc.de: 

http://wikisend.com/download/389384/ANONYMQUS%20AND%20LULZSEC%20BRIEFING 

.pdf 

(7:12:41 PM) anonpik@jabber.ccc.de: Hopefully you find this interesting 
(7:14:17 PM) anonpik@jabber.ccc.de: Can you confirm reciept? 

(7:14:40 PM) leondavidson@jabber.org/jabber.org: back 
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(7:14:52 PM) leondavidson@jabber.org/jabber.org: ja I got this 

(7:14:58 PM) leondavidson@jabber.org/jabber.org: shame it looks like its being passed around 
(7:15:33 PM) leondavidson@jabber.org/jabber.org: thats a pretty small brefing 
(7:16:07 PM) anonpik@jabber.ccc.de: Have you seen this before? 

(7:16:34 PM) anonpik@jabber.ccc.de: This hasen't been leaked to anyone else. 

(7:16:43 PM) leondavidson@jabber.org/jabber.org: which? 

(7:16:45 PM) leondavidson@jabber.org/jabber.org: thepastie? 

(7:16:52 PM) anonpik@jabber.ccc.de: Its just a general overview. The pdf 

(7:17:16 PM) leondavidson@jabber.org/jabber.org: and who are you? to rndomly hit me up like 

this tryin to send me a small pdf 

(7:17:35 PM) anonpik@jabber.ccc.de: Just a fellow anon. 

(7:18:05 PM) anonpik@jabber.ccc.de: I understand the caution. Open in a standalone VM or 
something to be secure. 

(7:18:17 PM) anonpik@jabber.ccc.de: Or just open it in Tails or something. 

(7:18:27 PM) anonpik@jabber.ccc.de: I'll paste some of the text here if you like 
(7:18:31 PM) leondavidson@jabber.org/jabber.org: I always do 

(7:18:39 PM) leondavidson@jabber.org/jabber.org: paste me text for the sake of laziness 
(7:19:32 PM) anonpik@jabber.ccc.de: CONFIDENTIAL 

SUMMARY OF THE EU/USA EXPERIENCE WITH THE ANONYMOUS AND 
LULZSEC HACKTIVIST GROUPS. 

ANONYMOUS AND LULZSEC MEETING EUROPOL HQ 14/12/2011 
ATTENDEES: Austria, FBI, Portugal, Spain, France, Europol, USA LEG 
ATT, Belgium, Norway, Finland, UK, Italy, Ireland and Germany. 

(7:19:36 PM) anonpik@jabber.ccc.de: This is the intro. 

(7:20:26 PM) anonpik@jabber.ccc.de: Interested? 

(7:20:27 PM) leondavidson@jabber.org/jabber.org: cite 

(7:20:30 PM) leondavidson@jabber.org/jabber.org: cute 

(7:20:36 PM) leondavidson@jabber.org/jabber.org: austria was in there haha 

(7:20:44 PM) leondavidson@jabber.org/jabber.org: yeah, paste the rest if possible 

(7:21:01 PM) anonpik@jabber.ccc.de: its easier to just look at the pdf. 

(7:21:13 PM) anonpik@jabber.ccc.de: Spain: The Spanish Delegate gave an update on the 
Spanish experience, 

the hackers called it operation payback, the same as USA and other 
countries. The attacks also started as attacks against copyright 
organisations. The tool called LOIC mentioned above by the UK, was used 
in Spain to devastating effect. The attacks were directed at: SGAE the 
Spanish copyright people. The Spanish police are struggling to identify 
suspects, only Internet NICS. The Spanish did not have a crime for DDoS. 

The groups use IRC to communicate same as Ireland and they publish 
their activities on Twitter and YouTube. The Spanish Police are now 
working in the IRC chat channels and they are gaining access to the 
channels. They are getting good intelligence. The Spanish police have 
been discovered by the hackers and dumped out as well, the Spanish 
Police have access to the public chat rooms and then there is very limited 
access to the real PRIVATE channels where trusted members go. Spanish 
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police say monitoring the channels is very time consuming and they are 
struggling to keep up. Spanish Police have now arrested 3 administrators 
of the channels in Spain. Admissions made and charges to follow. The 
Spanish, USA and UK are using a very interesting tactic where 
after arresting the suspects, the Police use the Internet NIC of the 
suspect in order to gain access to the secret private channels 
where the real business is done. The Spanish speaking world in STH 
AMERICA are also attacking Spain. 

(7:22:24 PM) leondavidson@jabber.org/jabber.org: interesting 
(7:23:43 PM) anonpik@jabber.ccc.de: Sorry I’m back 

(7:24:09 PM) anonpik@jabber.ccc.de: Italy: The Italians are experiencing the same as everyone 
else, the 

Italians have arrested 30 people, the attacks in Italy are geared towards 
the police and Political targets. Some very sensitive files were stolen from 
the Italian police and published in full on the internet. Very embarrassing 
for the Italian National police. The Police in Italy are seeing the LOIC tool 
used by Italian Anonymous and seen it used with a BOTNET. The Italians 
are very advanced in the technical investigations on the chat channels 
and against the suspects including full time undercover police in channels, 
using fake ID’s and ID’s from suspects who have been arrested etc. They 
use these ID’s in the private areas of the Chat Channels. This is very 
effective and the Italian police also use Trojan software to target suspects. 

Record their encryption keys before searching their homes, they know 
when they are online and they also have loads of useful intelligence from 
the use of these Trojans. The Italians have similar break away groups 
such as GREEN RIGHTS, this group have committed web attacks against 
sites such as the TURIN to LYON railway project. The M.O. is the same 
LOIC M.O. used by other Anonymous attackers. 

(7:25:22 PM) leondavidson@jabber.org/jabber.org: funny how their focus is LOIC, which is a 
low level attack, and have no comprehension of the advanced attacks by my team et al 
(7:26:19 PM) anonpik@jabber.ccc.de: They don't seem to comprehend the whole thing 
(7:26:37 PM) anonpik@jabber.ccc.de: So the Italians have malware on anons computers 
(7:28:30 PM) anonpik@jabber.ccc.de: Have you a copy of the pdf anyways? 

(7:28:39 PM) leondavidson@jabber.org/jabber.org: no 

(7:28:53 PM) leondavidson@jabber.org/jabber.org: interesting and we've seen a lot of internal 
commms about the cases 

(7:29:01 PM) leondavidson@jabber.org/jabber.org: especially from foreign feds 

(7:30:28 PM) anonpik@jabber.ccc.de: Thats interesting, what countries? Care to share. Will you 

pass the pdf on to your team. Some of them might find it interesting. 

(7:31:01 PM) leondavidson@jabber.org/jabber.org: you're sounding like a fed, bro. 

(7:31:06 PM) leondavidson@jabber.org/jabber.org: I don't like feds very much 
(7:31:16 PM) anonpik@jabber.ccc.de: Either do I 

(7:31:31 PM) anonpik@jabber.ccc.de: Would you rather I pass this information to you in a 
different format? 
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(7:31:59 PM) anonpik@jabber.ccc.de: I just think it would be benifical 

(7:32:12 PM) leondavidson@jabber.org/jabber.org: thanks I’ll pass it over to my team 

(7:32:17 PM) leondavidson@jabber.org/jabber.org: anyway, whats up with you? 

(7:32:19 PM) leondavidson@jabber.org/jabber.org: hows life? 

(7:32:30 PM) anonpik@jabber.ccc.de: Good. How are you? 

(7:33:23 PM) leondavidson@jabber.org/jabber.org: im alright 

(7:33:24 PM) leondavidson@jabber.org/jabber.org: same old shit 

(7:33:56 PM) anonpik@jabber.ccc.de: Yeah, making much progress on #antisec? 

(7:33:59 PM) anonpik@jabber.ccc.de: Any good booty to come? 

(7:34:57 PM) leondavidson@jabber.org/jabber.org: plenty 
(7:35:38 PM) anonpik@jabber.ccc.de: Thats good! 

(7:35:47 PM) anonpik@jabber.ccc.de: Best of luck with the stuggle! 

(7:35:58 PM) leondavidson@jabber.org/jabber.org: thx matey 
(7:36:00 PM) leondavidson@jabber.org/jabber.org: arrrr 
(7:36:05 PM) leondavidson@jabber.org/jabber.org: shiver me timbers 
(7:36:16 PM) anonpik@jabber.ccc.de: ? 

(7:43:08 PM) anonpik@jabber.ccc.de: Goodbye 
(7:43:17 PM) leondavidson@jabber.org/jabber.org: bye love 
(7:46:07 PM) yohoho@jabber.ccc.de: lol weird 
(7:46:10 PM) yohoho@jabber.ccc.de: fake? 

(7:52:04 PM) yohoho@jabber.ccc.de: lol 

(8:07:58 PM) leondavidson@jabber.org/jabber.org: dont know 

(8:08:37 PM) yohoho@jabber.ccc.de: https://plus.google.com/102846180715160761751 

http://libertariansecurity.wordpress.com/ 

http://www.facebook.com/people/Luis-Corrons/659474869 

http://twitter.eom/#l/Luis Corrons 

(8:08:44 PM) yohoho@jabber.ccc.de: is luis from pandasecurity 
(8:08:47 PM) yohoho@jabber.ccc.de: 

lcorrons@pandasecurity.com:$P$Bh3qV7MSJoi5tqhnkHCt3cxUEMNiX8/:SeanPaul 
(8:09:36 PM) yohoho@jabber.ccc.de: anyway to determine their gmaila ccount from google+? 
(8:09:49 PM) leondavidson@jabber.org/jabber.org: hmm 

(8:09:57 PM) yohoho@jabber.ccc.de: http://www.itpro.co.uk/626746/q-a-luis-corrons-on-taking- 
down-cyber-criminals 

(8:10:07 PM) leondavidson@jabber.org/jabber.org: oh hes taking down cyber criminals? 

(8:10:08 PM) leondavidson@jabber.org/jabber.org: nie 

(8:10:09 PM) leondavidson@jabber.org/jabber.org: nice 

(8:10:17 PM) leondavidson@jabber.org/jabber.org: he must be like cocks 

(8:10:19 PM) yohoho@jabber.ccc.de: he killed this botnet 

(8:10:22 PM) yohoho@jabber.ccc.de: and got the guy arrested 

(8:10:47 PM) yohoho@jabber.ccc.de: "We were wondering what it would be like to go 
undercover, to be able to infiltrate different gangs of cyber criminals so we can gather a lot of 
intel - that would be great but there are problems with that." 

(8:11:07 PM) yohoho@jabber.ccc.de: wow this guy is a major pile 
(8:11:11 PM) yohoho@jabber.ccc.de: and he is about to get owned hard 

(8:11:25 PM) yohoho@jabber.ccc.de: how many times do people have to get owned before they 
realize it's bad idae to stick their dick in our shit 
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(8:11:41 PM) yohoho@jabber.ccc.de: 

Another problem is that sometimes if you want to infiltrate and you have to be one of the 
criminals, you have to do things that you shouldn’t. In that case, you need to be with law 
enforcement. We have to find ways to cooperate even better with law enforcement. 

(8:1 l:5l PM) yohoho@jabber.ccc.de: btw 

(8:11:56 PM) yohoho@jabber.ccc.de: owned a second domain belonging to panda 

(8:11:58 PM) yohoho@jabber.ccc.de: support forum 

(8:12:02 PM) yohoho@jabber.ccc.de: 16,000 users 

(8:12:05 PM) yohoho@jabber.ccc.de: this will be big 

(8:12:24PM) leondavidson@jabber.org/jabber.org: sweet!! 

(8:12:30 PM) leondavidson@jabber.org/jabber.org: plesk? or something else? 

(8:12:36 PM) yohoho@jabber.ccc.de: also plesk 

(8:12:40 PM) yohoho@jabber.ccc.de: how dumb are they 

(8:12:50 PM) leondavidson@jabber.org/jabber.org: HAHAHAHAHHA 

(8:12:53 PM) leondavidson@jabber.org/jabber.org: oown them hard 

(8:12:55 PM) leondavidson@jabber.org/jabber.org: for FFF 

(8:12:56 PM) leondavidson@jabber.org/jabber.org: plz 

(8:14:24 PM) leondavidson@jabber.org/jabber.org: wow tooth ache 

(8:14:34 PM) yohoho@jabber.ccc.de: well 

(8:14:36 PM) yohoho@jabber.ccc.de: it will be a lot of work first 

(8:14:41 PM) yohoho@jabber.ccc.de: we want to get entire panda spools 

(8:16:24 PM) yohoho@jabber.ccc.de: Luis Corrons spent much of the last year helping Spanish 
police with an investigation that led to the arrest of three local men suspected of operating and 
renting access to a massive and global network of hacked computers . 

(8:26:10 PM) leondavidson@jabber.org/jabber.org: theres nothing more beautiful 

(8:26:14 PM) leondavidson@jabber.org/jabber.org: than whitehats getting hacked 

(8:26:23 PM) yohoho@jabber.ccc.de: yeah 

(8:26:26 PM) yohoho@jabber.ccc.de: it really is 

(8:26:29 PM) yohoho@jabber.ccc.de: this mofo is popular too 

(8:26:32 PM) yohoho@jabber.ccc.de: he speaks at bsides and shit 

(8:26:51 PM) leondavidson@jabber.org/jabber.org: should I start a twitter argument with him? 

and get people all crazy when we finally hack his shit 

(8:26:54 PM) leondavidson@jabber.org/jabber.org: during the argument 

(8:26:58 PM) leondavidson@jabber.org/jabber.org: it'll be full of LOL 

(8:27:12 PM) yohoho@jabber.ccc.de: yes I think so 

(8:27:14 PM) yohoho@jabber.ccc.de: but 

(8:27:16 PM) yohoho@jabber.ccc.de: maybe wait just a little bit 
(8:27:19 PM) yohoho@jabber.ccc.de: until we get one of his accounts 
(8:27:22 PM) leondavidson@jabber.org/jabber.org: ja 

(8:27:24 PM) yohoho@jabber.ccc.de: we don't want him getting paranoid and changing passes 

(8:27:34 PM) yohoho@jabber.ccc.de: after all you are the great sabu 

(8:27:41 PM) yohoho@jabber.ccc.de: you can scare them into unplugging 

(8:27:46 PM) leondavidson@jabber.org/jabber.org: ;x 

(8:27:51 PM) leondavidson@jabber.org/jabber.org: we’ll wait till he's 100% 

(8:27:56 PM) leondavidson@jabber.org/jabber.org: owned tht is 
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(8:27:58 PM) yohoho@jabber.ccc.de: lol 

(8:27:59 PM) leondavidson@jabber.org/jabber.org: then I'll start the shit 
(8:27:59 PM) yohoho@jabber.ccc.de: yes 

(8:32:28 PM) yohoho@jabber.ccc.de: "LulzSec disintegrated because they are afraid," says Luis 
Corrons, research director of PandaLabs 

(8:43:00 PM) yohoho@jabber.ccc.de: i'll soon have more passes for you 
(8:43:01 PM) yohoho@jabber.ccc.de: to crack 

(8:50:19 PM) leondavidson@jabber.org/jabber.org: !!!!!!!!!!!!!!!!!!!!!! 

(8:50:27 PM) leondavidson@jabber.org/jabber.org: he said we were afraid? 

(8:50:37 PM) leondavidson@jabber.org/jabber.org: huehuehe 
(8:50:46 PM) yohoho@jabber.ccc.de: he is fucked 
(8:50:47 PM) yohoho@jabber.ccc.de: so fucked 
(8:55:07 PM) yohoho@jabber.ccc.de: ok 
(8:55:08 PM) yohoho@jabber.ccc.de: so 

(8:55:12 PM) yohoho@jabber.ccc.de: they have antivirus downloads on their system 
(8:55:17 PM) yohoho@jabber.ccc.de: we have to backdoor this mofo 
(8:55:34 PM) yohoho@jabber.ccc.de: .exes 
(9:49:09 PM) yohoho@jabber.ccc.de: here ? 

(10:28:09 PM) leondavidson@jabber.org/jabber.org: yo 

(10:28:39 PM) yohoho@jabber.ccc.de: i'm preparing some hashes for you now 

(10:28:40 PM) yohoho@jabber.ccc.de: almost ready 

(10:28:44 PM) yohoho@jabber.ccc.de: a _fuckload_ of phpbb users 

(10:28:46 PM) yohoho@jabber.ccc.de: on support forums 

(10:28:48 PM) yohoho@jabber.ccc.de: a few .govs 

(10:28:51 PM) leondavidson@jabber.org/jabber.org: kk 

(10:29:43 PM) yohoho@jabber.ccc.de: 

5321,0,39,",0,71.168.51.120’, 1252371872,’cooper2009','cooper2009','$H$9JzBFAfURoUt/XQ 11 
ZwqOJKOkwpcRYl', 125 2371872,0, 'jeffrey.jenkins@hq.dhs.gov' 

(10:31:04 PM) yohoho@jabber.ccc.de: betwen these two systems we have a sizable chunk of shit 
(10:31:17 PM) yohoho@jabber.ccc.de: we just need to dum their mail in mass 
(10:31:23 PM) yohoho@jabber.ccc.de: this is good retaliation for spain busts too 
(10:31:30 PM) yohoho@jabber.ccc.de: since this firm is responsible for tracking down botnets 
and shit 

(10:31:34 PM) leondavidson@jabber.org/jabber.org: hq=win 

(10:31:37 PM) yohoho@jabber.ccc.de: I honestly woldn't be surprised if they were involved in 
the busts 

(10:31:44 PM) leondavidson@jabber.org/jabber.org: mhm 
(10:32:26 PM) yohoho@jabber.ccc.de: anyway 

(10:32:35 PM) yohoho@jabber.ccc.de: green has been pmin’n me crazy trying to get my attention 
(10:32:38 PM) yohoho@jabber.ccc.de: I ben blowin him off 
(10:32:42 PM) yohoho@jabber.ccc.de: then he starts talking 
(10:32:46 PM) yohoho@jabber.ccc.de: saying luis si actually zeekill 

(10:33:17 PM) yohoho@jabber.ccc.de: apparently he has been watching channels and noticed that 
I was giving him a hard time 

(10:33:41 PM) yohoho@jabber.ccc.de: regardless of whether it was actually the same luis or not 
(I believe it was - ver consistant with his politics and his writing style) 


105267 



(10:33:45 PM) yohoho@jabber.ccc.de: luis needs to get hit anyway 

(10:33:53 PM) yohoho@jabber.ccc.de: because of his work and all the shit he said online about 
anons / hackers 

(10:34:54 PM) yohoho@jabber.ccc.de: 33,000 users in this phpbb db 
(10:35:47 PM) leondavidson@jabber.org/jabber.org: unffffffffffffff 

(10:36:05 PM) leondavidson@jabber.org/jabber.org: and ignoring that idiot is the way to go 
(10:36:41 PM) yohoho@jabber.ccc.de: yeah dont' want to confirm anything to him 
(10:41:46 PM) yohoho@jabber.ccc.de: ok wikisending now 

(10:41:55 PM) yohoho@jabber.ccc.de: yo, we need to find someone who can set up malware and 
monitor the results for us 

(10:41:58 PM) yohoho@jabber.ccc.de: we have too many targets 

(10:42:04 PM) yohoho@jabber.ccc.de: this one is providing direct links to .exe downloads ffs 

(10:42:09 PM) yohoho@jabber.ccc.de: panda that is 

(10:42:33 PM) leondavidson@jabber.org/jabber.org: well 

(10:42:51 PM) leondavidson@jabber.org/jabber.org: heres the issue 

(10:43:03 PM) leondavidson@jabber.org/jabber.org: we need someone in malware who has 
some exploit packs and undetecable shit 

(10:43:32 PM) leondavidson@jabber.org/jabber.org: value is one, but I don't know if he has 
anything undetecable. heres nother thing though 

(10:43:37 PM) leondavidson@jabber.org/jabber.org: if we infect panda's av 

(10:43:48 PM) leondavidson@jabber.org/jabber.org: who are we owning exactly? thousands of 

regular people? 

(10:43:56 PM) leondavidson@jabber.org/jabber.org: we need to infect their coorperte customers 
(10:43:56 PM) leondavidson@jabber.org/jabber.org: etc 
(10:44:04 PM) yohoho@jabber.ccc.de: I hear you 

(10:44:11 PM) yohoho@jabber.ccc.de: well, there's other targets we need to backdoor in similar 
way 

(10:44:16 PM) yohoho@jabber.ccc.de: the police software developers and all 
(10:44:22 PM) leondavidson@jabber.org/jabber.org: yeah 

(10:44:29 PM) leondavidson@jabber.org/jabber.org: thts for sure something we can do 

(10:47:12 PM) yohoho@jabber.ccc.de: http://wikisend.com/download/584246/morepanda.txt.gz 

(10:47:17 PM) yohoho@jabber.ccc.de: pandalol 

(10:47:31 PM) leondavidson@jabber.org/jabber.org: my nigga 

(10:47:33 PM) leondavidson@jabber.org/jabber.org: on some real shit 

(10:47:35 PM) yohoho@jabber.ccc.de: first part is riority - panda hashes 

(10:47:41 PM) leondavidson@jabber.org/jabber.org: I can't believe these idiots really running 
plesk 

(10:47:45 PM) yohoho@jabber.ccc.de: others 

(10:47:47 PM) yohoho@jabber.ccc.de: yeah 

(10:47:52 PM) yohoho@jabber.ccc.de: or phpbb 

(10:48:33 PM) leondavidson@jabber.org/jabber.org: mhm 

(10:50:30 PM) yohoho@jabber.ccc.de: yeah see if u can get them hashes craxkd 

(10:50:42 PM) yohoho@jabber.ccc.de: also tell then to hit mr up 

(10:50:51 PM) yohoho@jabber.ccc.de: sleep time 

(10:52:34 PM) leondavidson@jabber.org/jabber.org: going through 

http://www.inc.com/inc5000/list/201 l/industry/security/x/revenue to find any other security 
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companies suffering the same fate as panda 

(10:54:13 PM) yohoho@jabber.ccc.de: yrses do thsy 

(10:55:19 PM) leondavidson@jabber.org/jabber.org: goodnight broham 

(11:02:35 PM) leondavidson@jabber.org/jabber.org: www.drgo.org:8443 republican group 

(11:04:16 PM) leondavidson@jabber.org/jabber.org: pass me that plesk bug so I can hunt for 

shit while you're gone, its getting patched anyway I might as well see if I cn find more shit 

(11:09:52 PM) leondavidson@jabber.org/jabber.org: 

http://www.mYfoxdc.com/dpps/news/internet-outage-at-pentagon-dpgonc-2012Q301- 

to 18314337#ixzzlnuwRVHyO = probably an instrusion 
(7:10:38 PM) leondavidson@jabber.org/jabber.org: yo yo 
(7:11:29 PM) yohoho@jabber.ccc.de: whats up 

(7:11:30 PM) yohoho@jabber.ccc.de: hey did you pass on them new panda hashes 
(7:11:48 PM) leondavidson@jabber.org/jabber.org: yeah let me rehash 
(7:13:14 PM) yohoho@jabber.ccc.de: wait you did? 

(7:13:32 PM) leondavidson@jabber.org/jabber.org: ja but I'm asking him if theres any cracks 
for us 

(7:13:41 PM) yohoho@jabber.ccc.de: ok 

(7:13:44 PM) yohoho@jabber.ccc.de: what else is going on 

(7:17:33 PM) leondavidson@jabber.org/jabber.org: nothing really chillin with the fam 
(7:17:35 PM) leondavidson@jabber.org/jabber.org: bullshitting 

(7:17:41 PM) leondavidson@jabber.org/jabber.org: set/q just wrote me some crazy messages 
(7:17:44 PM) leondavidson@jabber.org/jabber.org: did you curse him out again? 

(7:19:20 PM) yohoho@jabber.ccc.de: I did a few days ago 

(7:19:29 PM) yohoho@jabber.ccc.de: he was talkin shit about antisec how it fell off 

(7:19:42 PM) yohoho@jabber.ccc.de: I grilled him on the wired press thing too 

(7:20:00 PM) leondavidson@jabber.org/jabber.org: (1:20:53 AM) sett@jabber.ccc.de: no 

talk then? grah. 

(1:21:15 AM) sett@jabber.ccc.de: you bro.. i love you, will never betray you., but 
possibly we need to part ways. 

(7:10:27 PM) leondavidson@jabber.org/jabber.org : yo 

(7:20:02 PM) yohoho@jabber.ccc.de: I told him he shoudl stop speaking for other people's hacks 
esecially when he fucks up like he did 

(7:20:09 PM) leondavidson@jabber.org/jabber.org: people getting too fucking dramatic 

(7:20:17 PM) yohoho@jabber.ccc.de: yeah I think I got to his head honestly 

(7:20:22 PM) yohoho@jabber.ccc.de: he sent some weird shit over to nato too 

(7:20:57 PM) yohoho@jabber.ccc.de: finally he did try to make peace with me and explain 

himself 

(7:21:03 PM) yohoho@jabber.ccc.de: for the purpose of neutrality 

(7:21:17 PM) yohoho@jabber.ccc.de: I have been pretty vocal as to why I would never work with 
him is why and now people are asking him about it 
(7:21:22 PM) leondavidson@jabber.org/jabber.org: weird 

(7:21:36 PM) yohoho@jabber.ccc.de: so now it's more like whatever i'm not actively trying to 
destroy him haha 

(7:21:49 PM) yohoho@jabber.ccc.de: btw h came back around 

(7:21:54 PM) yohoho@jabber.ccc.de: told me another possible way they discovered plesk 
(7:21:59 PM) leondavidson@jabber.org/jabber.org: how? 
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(7:22:00 PM) yohoho@jabber.ccc.de: a big job was pulled on a bitcoin market 

(7:22:13 PM) leondavidson@jabber.org/jabber.org: no way. dont tell me he was the one that 

stole the 3000 bitcoins last week? 

(7:22:13 PM) leondavidson@jabber.org/jabber.org: ROFL 
(7:22:14 PM) leondavidson@jabber.org/jabber.org: AGAIN? 

(7:22:25 PM) yohoho@jabber.ccc.de: I dont know details 

(7:22:29 PM) leondavidson@jabber.org/jabber.org: yeah 

(7:22:31 PM) leondavidson@jabber.org/jabber.org: wow 

(7:22:33 PM) yohoho@jabber.ccc.de: but the article did mention the plesk vuln 

(7:22:35 PM) leondavidson@jabber.org/jabber.org: greed fucked that up 

(7:22:40 PM) yohoho@jabber.ccc.de: who knows 

(7:22:44 PM) yohoho@jabber.ccc.de: it could have been fucked a lot of ways 
(7:22:51 PM) yohoho@jabber.ccc.de: like amybe greek police asked the kid about plesk 
(7:22:59 PM) leondavidson@jabber.org/jabber.org: they did???????? 

(7:23:03 PM) yohoho@jabber.ccc.de: also we were mass pwning large subnets 

(7:23:09 PM) yohoho@jabber.ccc.de: well actually I never clarifie that 

(7:23:15 PM) yohoho@jabber.ccc.de: they asked him how he got the passwords 

(7:23:21 PM) yohoho@jabber.ccc.de: then he asked me whether it was a plesk vuln 

(7:23:23 PM) yohoho@jabber.ccc.de: and I never told him it was 

(7:23:29 PM) yohoho@jabber.ccc.de: I jsut gave him ftp logins 

(7:23:33 PM) leondavidson@jabber.org/jabber.org: . 

(7:23:35 PM) leondavidson@jabber.org/jabber.org: well 
(7:23:38 PM) yohoho@jabber.ccc.de: and the box is patched now 
(7:23:39 PM) yohoho@jabber.ccc.de: so 
(7:23:40 PM) yohoho@jabber.ccc.de: it's whatever 

(7:23:47 PM) leondavidson@jabber.org/jabber.org: maybe they put 2 and 2 together 

(7:23:50 PM) leondavidson@jabber.org/jabber.org: they reinstall 

(7:23:54 PM) yohoho@jabber.ccc.de: yeah well cat is out of the bag now 

(7:23:55 PM) leondavidson@jabber.org/jabber.org: and got owned aggain 

(7:23:57 PM) leondavidson@jabber.org/jabber.org: with same software 

(7:23:58 PM) yohoho@jabber.ccc.de: mediatemple is aware as well 

(7:24:05 PM) leondavidson@jabber.org/jabber.org: they patching boxes? 

(7:24:09 PM) yohoho@jabber.ccc.de: h scanned mediatemple again and only got a small handful 
(7:24:17 PM) yohoho@jabber.ccc.de: ship has sailed for the most part 
(7:24:20 PM) yohoho@jabber.ccc.de: we getting stragglers now 

(7:24:25 PM) yohoho@jabber.ccc.de: but it's ok we got leads on other targets with other vulns 

(7:27:12 PM) leondavidson@jabber.org/jabber.org: mhm 

(7:35:59 PM) yohoho@jabber.ccc.de: so no luck on them other passes yet? 

(7:36:05 PM) yohoho@jabber.ccc.de: sorry... fiending to get into these panda targets 

(7:37:17 PM) leondavidson@jabber.org/jabber.org: not yet give me a few 

(7:37:26 PM) leondavidson@jabber.org/jabber.org: you'll get cracks very soon 

(7:38:28 PM) yohoho@jabber.ccc.de: also 

(7:38:28 PM) yohoho@jabber.ccc.de: can you crack these 

(7:38:29 PM) yohoho@jabber.ccc.de: INSERT INTO 'users' VALUES 

(0,0,0,0,",",0,0,0,0,0,NULL,NULL,"),(1,’admin’,’al3bd2b5fd25fa31fca7abe5d639d9b6’,’ 

webservices@motionmediagroup.ca',0,0,0,",",0,1262887442,1322179142,1322068185,1,'- 
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25200',",",'webservices@motionmediagroup.ca','a:l:{s:18:\"admin_compact_mode\";b:l;}',’Ame 
rica/Dawson_Creek'),(3,'Fort St John’,’f62af50eal7554c9811787c22ff91290','Fort-St- 
John@motionmediagroup.ca',0,0,0,",",0,1265001620,1327424653,1327424463,1,'- 
25200',",",'Fort-St-John@motionmediagroup.ca','a:2: {s: 13 :\"form_build_id\";s:37:\"form- 
0ef5f76c6bd7889c97d26d46b0c69d87\";s:3:\"tid\";s:l:\"l\";}','America/Dawson_Creek'),(4,'Fort 
Nelson’,'f62af50eal7554c9811787c22ff91290','Fort- 

Nelson® motionmediagroup.ca',0,0,0,",",0,1265001646,1323894019,1323886887,1,'- 
25200',",",'Fort-Nelson@motionmediagroup.ca','a:2:{s:13:\"form_build_id\";s:37:\"form- 
2e5855al2a736bc924e238fld79bdcf9\";s:3:\"tid\";s:l:\"3\";}',’America/Dawson_Creek'),(5,'NE 
BC','f62af50eal7554c9811787c22ff91290','nebc@thecrimestoppersnetwork.com',0,0,0,",",0,127 
0517703,1327220815,1327220256,1 ,'-25 200’,",",'peace- 

country® thecrimestoppersnetwork.com','a:2:{s: 13 :\"form_build_id\";s:37:\"form- 
1125c4605298616c298e985eb3d2d9c6\";s:3:\"tid\";s:2:\"10\";}','America/Dawson_Creek'),(6,'C 
hetwynd','f62af50eal7554c9811787c22ff91290','chetwynd@thecrimestoppersnetwork.com',0,0, 
0,",",0,1270517728,1304452208,1304452208,1,'- 

25200',",",'chetwynd@thecrimestoppersnetwork.com','a:2:{s: 13 :\"form_build_id\" ;s:37:\"form- 
0e7dd2784a5554ef79050e9ebc7ab014\";s:3:\"tid\";s:l:\"6\";}',’America/Dawson_Creek'); 

(7:38:31 PM) yohoho@jabber.ccc.de: we lost access to their site unfortunately 
(7:38:32 PM) yohoho@jabber.ccc.de: thecrimestoppersnetwork.com 
(7:38:32 PM) yohoho@jabber.ccc.de: but if we can get drupal back in we're good 
(7:42:07 PM) yohoho@jabber.ccc.de: actually scratch that 

(7:42:15 PM) yohoho@jabber.ccc.de: just found that admina ccoutn doubled with the ftp login 

(7:42:23 PM) leondavidson@jabber.org/jabber.org: oh ok 

(7:42:30 PM) leondavidson@jabber.org/jabber.org: well I sent to crack anyway 

(7:42:57 PM) yohoho@jabber.ccc.de: k 

(7:43:11 PM) yohoho@jabber.ccc.de: again if they are cool have them hit me up so we can save 
time 

(7:43:59 PM) leondavidson@jabber.org/jabber.org: sec 

(7:44:09 PM) leondavidson@jabber.org/jabber.org: he signed off after I gave him hashes 
(7:44:11 PM) leondavidson@jabber.org/jabber.org: give ihm a few 
(7:44:18 PM) yohoho@jabber.ccc.de: sure 

(7:44:25 PM) yohoho@jabber.ccc.de: man I really wish I had some help on this shit 
(7:44:31 PM) yohoho@jabber.ccc.de: elche has been tremendous help 
(7:44:34 PM) yohoho@jabber.ccc.de: but he is like the only one 
(7:44:35 PM) yohoho@jabber.ccc.de: and god 

(7:44:53 PM) yohoho@jabber.ccc.de: I had to go and redo a lot of the work revolusec dropped 
the ball on 

(7:45:02 PM) yohoho@jabber.ccc.de: can you believe they haven’t even copied all the mail from 
the target servers yet 

(7:45:08 PM) yohoho@jabber.ccc.de: and some may be lost 
(7:45:50 PM) leondavidson@jabber.org/jabber.org: sigh 
(7:45:53 PM) leondavidson@jabber.org/jabber.org: they're lame 

(7:46:40 PM) leondavidson@jabber.org/jabber.org: nigga I can help you just tell me what you 
need me to do. I could have been a bigger help had I had the plesk hole to scan broader networks 
(7:46:47 PM) leondavidson@jabber.org/jabber.org: so I been doing other shit 
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(7:47:00 PM) leondavidson@jabber.org/jabber.org: oh yeah btw I got some insider info from 
someone @ backtrace security 

(7:47:13 PM) leondavidson@jabber.org/jabber.org: as you know they're snitches to the top 
degree 

(7:47:14 PM) leondavidson@jabber.org/jabber.org: one sec 

(7:49:43 PM) leondavidson@jabber.org/jabber.org: talking to wicked about mail drama 
(7:49:48 PM) leondavidson@jabber.org/jabber.org: thats same shit that happened before 
(7:49:51 PM) leondavidson@jabber.org/jabber.org: they had so much great mail 
(7:49:55 PM) leondavidson@jabber.org/jabber.org: and dropped the ball bad 
(7:50:06 PM) yohoho@jabber.ccc.de: that can't happen 

(7:50:16 PM) yohoho@jabber.ccc.de: cant sit on all these targets dicking around when the booty 
is sitting right there 

(7:50:25 PM) yohoho@jabber.ccc.de: especially when we are asked to make it happenw ith WL 

(7:50:30 PM) yohoho@jabber.ccc.de: we repeated a 2TB number to JA 

(7:50:36 PM) yohoho@jabber.ccc.de: now it turns out it's like maybe 100GB 

(7:50:47 PM) yohoho@jabber.ccc.de: would have been 40-50GB if I didn’t go and reget all the 

mail from platinum.sy 

(7:51:08 PM) yohoho@jabber.ccc.de: fredrik just didn’t know if all the domains were important 
or not 

(7:51:19 PM) yohoho@jabber.ccc.de: like wtf get them all and let wl sort it out 

(7:51:32 PM) yohoho@jabber.ccc.de: and yes, there are a few major targets I can use some 

intrusion help with 

(7:51:45 PM) yohoho@jabber.ccc.de: so when you got time we can review and you can pick one 
and go with it 

(7:52:06 PM) leondavidson@jabber.org/jabber.org: yup 

(7:52:14 PM) yohoho@jabber.ccc.de: the plesk targets we got down... there's other shit that 
requires custom help 

(7:52:26 PM) leondavidson@jabber.org/jabber.org: my game is security research homey, dont 
forget this, hard targets I can play with 

(7:52:29 PM) leondavidson@jabber.org/jabber.org: just get me in the boxes 

(7:52:33 PM) leondavidson@jabber.org/jabber.org: reverse shells or whatever 

(7:52:49 PM) yohoho@jabber.ccc.de: ok then, well, we got like four that need some help 

(7:53:02 PM) yohoho@jabber.ccc.de: vislink, atr, lcso, and panda 

(7:53:07 PM) yohoho@jabber.ccc.de: we have mail on none of them 

(7:53:11 PM) leondavidson@jabber.org/jabber.org: panda is so fucking awesome btw 

(7:53:16 PM) yohoho@jabber.ccc.de: well actually on atr and lcso, we have webmail for their 

sysadmins 

(7:53:16 PM) leondavidson@jabber.org/jabber.org: I wish we had mail already 
(7:53:19 PM) leondavidson@jabber.org/jabber.org: to do a quick fff 

(7:53:30 PM) yohoho@jabber.ccc.de: yeah with that though, we may as well take time and do it 
right 

(7:53:41 PM) yohoho@jabber.ccc.de: a main service is secure email hosting 

(7:53:48 PM) yohoho@jabber.ccc.de: lots of other clients 

(7:54:16 PM) leondavidson@jabber.org/jabber.org: jea 

(7:54:55 PM) yohoho@jabber.ccc.de: and with lcso 

(7:54:58 PM) yohoho@jabber.ccc.de: we need windows network help 
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(7:56:10 PM) yohoho@jabber.ccc.de: there is a senior it guy and another programmer 
(7:56:21 PM) yohoho@jabber.ccc.de: we also have fuckloads of user/passes for lcso 

(7:56:31 PM) leondavidson@jabber.org/jabber.org: ja 

(7:56:45 PM) yohoho@jabber.ccc.de: they have district attorneys and detectives and shit on it 
(7:56:48 PM) yohoho@jabber.ccc.de: a few cybercrime detectives as well 
(7:56:53 PM) leondavidson@jabber.org/jabber.org: mhm 

(7:57:10 PM) yohoho@jabber.ccc.de: so that is a major win ready if we can just get into it 
(7:57:10 PM) yohoho@jabber.ccc.de: they have other internal bulletin board systems as well only 
on their vpn 

(7:57:11 PM) yohoho@jabber.ccc.de: so we have to get vn working, or, vulns on their Webserver 
(7:57:12 PM) yohoho@jabber.ccc.de: so there's that target 

(7:57:16 PM) yohoho@jabber.ccc.de: then on atr, we want to get more of their mail 
(7:57:23 PM) yohoho@jabber.ccc.de: we have webmail for their sysadmin, but no imap/pop3 
(7:57:31 PM) leondavidson@jabber.org/jabber.org: we're not doing anything for today? 

(7:57:31 PM) yohoho@jabber.ccc.de: there is also VPN but can't see to get it working 

(7:57:42 PM) yohoho@jabber.ccc.de: elche had a nc trooper site 

(7:57:53 PM) yohoho@jabber.ccc.de: but turns out it was on another server 

(7:57:55 PM) yohoho@jabber.ccc.de: had moved since 

(7:58:02 PM) yohoho@jabber.ccc.de: hit some religious sites but oh well 

(7:58:06 PM) yohoho@jabber.ccc.de: nothing is really ready in time 

(7:58:52 PM) yohoho@jabber.ccc.de: also god is going to finish preparing another site for a 
future #fff 

(7:59:00 PM) yohoho@jabber.ccc.de: small time but still good 
(8:02:03 PM) yohoho@jabber.ccc.de: and then 

(8:02:07 PM) yohoho@jabber.ccc.de: there is cop software developers 
(8:02:10 PM) yohoho@jabber.ccc.de: that we need to backdoor 
(8:02:19 PM) yohoho@jabber.ccc.de: with malware 
(8:04:07 PM) yohoho@jabber.ccc.de: hello 

(8:04:28 PM) leondavidson@jabber.org/jabber.org: im here homey 
(8:04:30 PM) leondavidson@jabber.org/jabber.org: just thinking 

(8:04:50 PM) leondavidson@jabber.org/jabber.org: malware all I have on my team is value, and 
funny ryan clearly does malware but hes compromised 
(8:05:01 PM) yohoho@jabber.ccc.de: yeah forget him 

(8:05:04 PM) leondavidson@jabber.org/jabber.org: windows stuff I swore off since msadc.pl 
your best bet is alex 

(8:05:07 PM) leondavidson@jabber.org/jabber.org: hes ninja with windows 

(8:05:13 PM) yohoho@jabber.ccc.de: hrm yes 

(8:05:20 PM) yohoho@jabber.ccc.de: he is always busy 

(8:05:24 PM) yohoho@jabber.ccc.de: he has helped briefly on a few things 

(8:05:32 PM) yohoho@jabber.ccc.de: but he says he has real world shit that is taking a lot of his 

time 

(8:05:43 PM) yohoho@jabber.ccc.de: I did give him info on one of the main targets 
(8:05:45 PM) yohoho@jabber.ccc.de: that we need to get into 

(8:05:56 PM) yohoho@jabber.ccc.de: I hope we didn't lose the opportunity because it's proly 
pathced now 

(8:06:02 PM) yohoho@jabber.ccc.de: windows it is harder to maintain good backdoors 
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(8:42:46 PM) yohoho@jabber.ccc.de: anyway 

(8:42:53 PM) yohoho@jabber.ccc.de: so where do you think you can fit in to some of these 
projects 

(8:43:04 PM) yohoho@jabber.ccc.de: we need to turn them from half owned shit into finished 
products 

(8:45:13 PM) yohoho@jabber.ccc.de: oh also 

(8:45:24 PM) yohoho@jabber.ccc.de: some .cz hackers shoed me some crazy emimusic.cz dump 

(8:45:28 PM) yohoho@jabber.ccc.de: lots of u/ps, md5 

(8:45:34 PM) yohoho@jabber.ccc.de: including many @emimusic.com 

(8:45:56 PM) yohoho@jabber.ccc.de: so can you pass those on 

(8:46:14 PM) yohoho@jabber.ccc.de: http://pastehtml.com/view/bpz6xOa3d.html I 

http://pastehtml.com/view/bpz728w7t.html 

(8:46:16 PM) yohoho@jabber.ccc.de: to get them cracked 

(8:47:18 PM) leondavidson@jabber.org/jabber.org: yup my boy signed on a bit ago 

(8:47:26 PM) leondavidson@jabber.org/jabber.org: also I'm willing to work on any of the linux 

boxes 

(8:47:30 PM) leondavidson@jabber.org/jabber.org: just pass my way 

(8:47:34 PM) leondavidson@jabber.org/jabber.org: sorry im over here arguing with some gimp 
(8:47:35 PM) leondavidson@jabber.org/jabber.org: also 
(8:47:37 PM) yohoho@jabber.ccc.de: ok well 

(8:47:39 PM) leondavidson@jabber.org/jabber.org: I meant to ttell you before 
(8:47:54 PM) leondavidson@jabber.org/jabber.org: some nigga leaked a url belonging to 
backstrace's private site 

(8:47:58 PM) leondavidson@jabber.org/jabber.org: I think its domain is dead now? 

(8:48:09 PM) leondavidson@jabber.org/jabber.org: but they basically sent that nigga tom ryan 
from providesecurity 

(8:48:23 PM) leondavidson@jabber.org/jabber.org: to record masked anons/blacbloc or anyone 
who is masked 

(8:48:33 PM) leondavidson@jabber.org/jabber.org: and recorded their faces when they 

unmaasked to talk or eat or drink 

(8:48:35 PM) yohoho@jabber.ccc.de: I beleive it 

(8:48:41 PM) leondavidson@jabber.org/jabber.org: let me see if I can find the vidz 
(8:48:42 PM) leondavidson@jabber.org/jabber.org: sec 
(8:48:43 PM) yohoho@jabber.ccc.de: tom ryan though? 

(8:48:46 PM) yohoho@jabber.ccc.de: they must be desarate 
(8:48:46 PM) leondavidson@jabber.org/jabber.org: yup 

(8:48:52 PM) leondavidson@jabber.org/jabber.org: he was doing the shit before 

(8:48:56 PM) leondavidson@jabber.org/jabber.org: remember? he posted a pi of a black dude 

(8:48:59 PM) leondavidson@jabber.org/jabber.org: and said it was me 

(8:49:04 PM) leondavidson@jabber.org/jabber.org: pic+ 

(8:49:36 PM) yohoho@jabber.ccc.de: yeah he is clueless 

(8:49:47 PM) yohoho@jabber.ccc.de: why are govs having someone who is 'known' to do their 
dirty work though 

(8:49:59 PM) yohoho@jabber.ccc.de: anyway 

(8:50:11 PM) yohoho@jabber.ccc.de: I dumped pandasecurity's sql and mail 

(8:50:15 PM) leondavidson@jabber.org/jabber.org: http://209123.8.46/done.html some faces 


105274 



are shown 

(8:50:20 PM) leondavidson@jabber.org/jabber.org: but their server ot killed 
(8:50:22 PM) leondavidson@jabber.org/jabber.org: dont know if its up 

(8:50:22 PM) yohoho@jabber.ccc.de: well there were like two shitty domains on panda's second 
server that had mail 

(8:50:24 PM) yohoho@jabber.ccc.de: not main obv 

(8:50:27 PM) leondavidson@jabber.org/jabber.org: oh word?? 

(8:50:37 PM) yohoho@jabber.ccc.de: so we have two boxes 

(8:50:46 PM) yohoho@jabber.ccc.de: with lots of various minisites, subdomains, etc 
(8:50:52 PM) yohoho@jabber.ccc.de: do you want to take that one up? 

(8:50:56 PM) yohoho@jabber.ccc.de: we also need to root vislink 
(8:50:58 PM) leondavidson@jabber.org/jabber.org: thts fine 
(8:50:58 PM) yohoho@jabber.ccc.de: this is high priority 
(8:51:02 PM) yohoho@jabber.ccc.de: so close to top notch spools 

(8:51:20 PM) leondavidson@jabber.org/jabber.org: wait so we got pandas mial? hows it looking 
so far? a lot 

(8:51:28 PM) yohoho@jabber.ccc.de: no 

(8:51:41 PM) yohoho@jabber.ccc.de: they had like two shitty probably irrelevant domains with 
mail on one of their boxes 

(8:51:47 PM) yohoho@jabber.ccc.de: we need to get mail 

(8:51:53 PM) yohoho@jabber.ccc.de: webmail.mep.pandasecutity.com best as I can tell 

(8:51:59 PM) yohoho@jabber.ccc.de: pop3/imap on mep.pandasecurity.com 

(8:52:05 PM) yohoho@jabber.ccc.de: then also mep.pandasecutity.com/admin 

(8:52:17 PM) yohoho@jabber.ccc.de: this is what their main domain's mx records point to 

(8:52:21 PM) yohoho@jabber.ccc.de: and is referenced in their support forums 

(8:52:34 PM) yohoho@jabber.ccc.de: however I do not have proper username format, or, they 

have good password policy, because no passes I've had worked so far 

(8:52:41 PM) yohoho@jabber.ccc.de: maybe with that latest list cracked 

(8:52:44 PM) leondavidson@jabber.org/jabber.org: got you 

(8:53:05 PM) yohoho@jabber.ccc.de: I have a list of their ftp/shell suer passes from their other 
servers oto 

(8:53:07 PM) yohoho@jabber.ccc.de: too 

(8:54:27 PM) leondavidson@jabber.org/jabber.org: mhm 

(8:54:31 PM) leondavidson@jabber.org/jabber.org: sex 

(8:54:50 PM) yohoho@jabber.ccc.de: here is list of domains 

(8:54:52 PM) yohoho@jabber.ccc.de: sh-3.1# cd /var/www/vhosts 

sh-3.1# Is -al 

total 14212 

drwxrwxr-x 40 root root 4096 2012-02-29 10:51 . 
drwxrwxr-x 6 root root 4096 2010-12-08 20:42 .. 

drwxr-xr-x 14 root root 4096 2010-11-10 18:19 antivirus-offers.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-08-31 09:52 blog.cloudantivims.com 
drwxrwxr-x 9 root root 4096 2009-11-09 19:52 chroot 

drwxr-xr-x 14 root root 4096 2012-02-27 11:14 cloudofficeprotection.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2011-02-02 09:43 cloud.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2011-05-25 11:39 cloudpartnercenter.pandasecurity.com 
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-rwxrwxr-x 1 root root 14364338 2009-11-19 14:36 
cloudprotectionbeta. pandasecurity. com. tar. gz 

drwxrwxr-x 14 root root 4096 2009-11-24 10:18 cloudprotection.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-04-13 13:51 cybercrime.pandasecurity.com 
drwxrwxr-x 5 root root 4096 2009-10-09 13:31 default 

drwxr-xr-x 14 root root 4096 2011-10-04 09:22 facebookfriends.pandasecurity.com 
-rw-r—r— 1 root root 2862 2010-11-29 17:08 favicon.ico 
drwxr-xr-x 14 root root 4096 2011-07-14 10:32 forgetsecurity.co.uk 
drwxr-xr-x 14 root root 4096 2011-09-29 17:28 forgetsecurity.co.za 
drwxr-xr-x 14 root root 4096 2011-05-18 10:19 forgetsecurity.es 
drwxr-xr-x 14 root root 4096 2011-11-25 09:53 go.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-06-15 11:01 info.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-06-15 11:30 information.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2012-02-28 17:50 lavuelta.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-06-15 11:36 maintenance.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2011-05-17 13:48 momentos.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-08-20 13:25 ondersteuning.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-11-29 09:24 pandacompetition.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-08-24 10:04 pandalabs.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-03-15 13:22 prensa.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-03-15 13:40 press.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-11-29 17:08 promo.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2011-01-12 11:36 protectyourfamily.pandasecurity.com 
drwxr-xr-x 15 root root 4096 2010-08-25 13:06 research.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2012-02-14 09:26 securitytothecloud.pandasecurity.com 
drwxrwxr-x 14 root root 4096 2009-11-23 09:35 serviciospro.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-06-15 11:33 servicos.pandasecurity.com 
drwxrwxr-x 3 root root 4096 2009-11-09 19:52 .skel 
drwxr-xr-x 14 root root 4096 2010-07-14 09:35 suporte.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-05-05 14:04 techcenter.pandasecurity.com 
drwxr-xr-x 14 root root 4096 2010-08-20 12:35 uninstall.cloudantivirus.com 
drwxr-xr-x 14 root root 4096 2010-07-29 12:11 wiki.cloudantivirus.com 
drwxr-xr-x 14 root root 4096 2010-08-31 10:50 www.cnccs.es 
drwxr-xr-x 14 root root 4096 2011-05-25 09:36 www.forgetsecurity.de 
drwxr-xr-x 14 root root 4096 2011-05-25 09:40 www.forgetsecurity.se 

(8:54:52 PM) leondavidson@jabber.org/jabber.org: on the box theres no bash histories or ssh 
pubkeys? hows last look? got any more server is they connect from? 

(8:55:17 PM) yohoho@jabber.ccc.de: cd /var/www/vhosts 
Is -al 
total 104 

drwxr-xr-x 30 root root 4096 Sep 22 06:20 . 

drwxr-xr-x 8 root root 80 Jan 15 2008 .. 

drwxr-xr-x 3 root root 14 Feb 6 2008 .skel 

drwxr-xr-x 14 root root 4096 Oct 14 2009 adrioclinic.com 

drwxr-xr-x 14 root root 4096 Dec 16 2008 alejandraaguilera.com 

drwxr-xr-x 14 root root 4096 Mar 30 2009 alessandraajraldi.com 
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drwxr-xr-x 14 root root 4096 Sep 22 06:20 antivirusproducts.net 
drwxr-xr-x 14 root root 4096 Oct 14 2009 cadera.info 
drwxr-xr-x 10 root root 88 Feb 6 2008 chroot 
drwxr-xr-x 14 root root 4096 Apr 21 2009 cloudantivirus.com 
drwxr-xr-x 14 root root 4096 Jul 30 2009 cnccs.es 
drwxr-xr-x 5 root root 49 Dec 18 2007 default 
drwxr-xr-x 14 root root 4096 Sep 27 2009 enriqueaguilera.com 
drwxr-xr-x 14 root root 4096 Dec 30 2009 ideasworthsharing.es 
drwxr-xr-x 14 root root 4096 Nov 5 2008 isabelrosique.com 
drwxr-xr-x 14 root root 4096 Jun 27 2010 kotconsultas.com 
drwxr-xr-x 14 root root 4096 Jul 19 2010 kotfarmaconsultas.com 
drwxr-xr-x 14 root root 4096 Dec 16 2008 lauraaguilera.com 
drwxr-xr-x 14 root root 4096 Nov 26 2008 livingbilbao.com 
drwxr-xr-x 14 root root 4096 Dec 16 2008 luciaaguilera.com 
drwxr-xr-x 14 root root 4096 Dec 16 2008 marcosaguilera.com 
drwxr-xr-x 14 root root 4096 May 5 2009 pandacares.com 
drwxr-xr-x 14 root root 4096 Jul 8 2009 pandasecurity.cn 
drwxr-xr-x 14 root root 4096 Apr 13 2009 pandasecurity.com 
drwxr-xr-x 14 root root 4096 Oct 30 2009 sandroajraldi.com 
drwxr-xr-x 14 root root 4096 Jan 18 2010 securitybloggersummit.com 
drwxr-xr-x 15 root root 4096 Nov 2 2008 seohead.es 
drwxr-xr-x 14 root root 4096 Nov 2 2008 telendro.com 
drwxr-xr-x 14 root root 4096 Nov 30 2008 urkiola.com 
drwxr-xr-x 14 root root 4096 Nov 2 2008 ydwm.com 
(8:55:29 PM) yohoho@jabber.ccc.de: let me get you shell 
(8:55:43 PM) yohoho@jabber.ccc.de: 

https://support.pandasecurity.com:8443/enterprise/control/core.php <- this is that second box 
(8:56:OOPM) leondavidson@jabber.org/jabber.org: kk 
(8:56:09 PM) yohoho@jabber.ccc.de: then 

https://cloudprotection.pandasecurity.com:8443/enterprise/control/core.php 
(8:56:13 PM) yohoho@jabber.ccc.de: boths hould have ./core "id" 

(8:56:17 PM) yohoho@jabber.ccc.de: spawn reverse shells do whatever 
(8:56:28 PM) yohoho@jabber.ccc.de: I dumped all DBs but 

(8:56:41 PM) yohoho@jabber.ccc.de: maybe we want to make offsite compressed archives of 
their entire webroots and homedirs 

(8:57:05 PM) yohoho@jabber.ccc.de: I already put the SQL up on the @91 server 
(8:57:08 PM) yohoho@jabber.ccc.de: 500GB 

(8:57:21 PM) yohoho@jabber.ccc.de: you may want to look through that to see if anything is 
good 

(8:57:35 PM) yohoho@jabber.ccc.de: it may have ticket info for their clients 
(8:58:10 PM) leondavidson@jabber.org/jabber.org: got you fam 
(8:58:15 PM) leondavidson@jabber.org/jabber.org: i’ll let you know 
(9:00:49 PM) yohoho@jabber.ccc.de: I did maybe see svn there 

(9:00:56 PM) yohoho@jabber.ccc.de: and yes they obviously have other boxes they use 
(9:01:16 PM) yohoho@jabber.ccc.de: also maybe we can try to reuse their passwords against 
their personal gmails 


105277 


(9:01:22 PM) yohoho@jabber.ccc.de: just a few google searches will come up 
(9:01:32 PM) yohoho@jabber.ccc.de: and we have like 250 o their employee hashed passwords 
(9:01:47 PM) yohoho@jabber.ccc.de: I honestly would not be surprised if they were involved in 
the spain busts 

(9:01:59 PM) yohoho@jabber.ccc.de: why was luis poking around anonops 

(9:03:48 PM) leondavidson@jabber.org/jabber.org: hes the nigga I argued with on efnet some 

time ago 

(9:03:51 PM) leondavidson@jabber.org/jabber.org: I think I sent you log 
(9:04:01 PM) yohoho@jabber.ccc.de: yeah? 

(9:04:03 PM) leondavidson@jabber.org/jabber.org: ja 

(9:04:06 PM) leondavidson@jabber.org/jabber.org: he was asking about me 

(9:04:08 PM) yohoho@jabber.ccc.de: if you still have it bring it back up 

(9:04:12 PM) leondavidson@jabber.org/jabber.org: let me get it 

(9:04:13 PM) yohoho@jabber.ccc.de: it will be lulzy for the release 

(9:04:14 PM) leondavidson@jabber.org/jabber.org: one minute 

(9:04:25 PM) leondavidson@jabber.org/jabber.org: this is why I'm excited by this 

(9:04:29 PM) yohoho@jabber.ccc.de: we shoudl troll his ass on ire live while he finds out how 

owned he is 

(9:04:33 PM) leondavidson@jabber.org/jabber.org: me and panda security actually bumped 
heeads before 

(9:04:35 PM) leondavidson@jabber.org/jabber.org: ja 

(9:04:38 PM) leondavidson@jabber.org/jabber.org: hes an efnet lamer 

(9:05:26 PM) leondavidson@jabber.org/jabber.org: wrong person, its actually their other guy 

AFulginiti from panda security 

(9:05:59 PM) yohoho@jabber.ccc.de: that is ok 

(9:06:02 PM) yohoho@jabber.ccc.de: the more the better 

(9:06:02 PM) leondavidson@jabber.org/jabber.org: http://pastebin.com/HVLB77vR 

(9:06:14 PM) leondavidson@jabber.org/jabber.org: this is the chan I was in but no one recorded 

to drama 

(9:06:18 PM) leondavidson@jabber.org/jabber.org: they trolled him bad 

(9:06:22 PM) leondavidson@jabber.org/jabber.org: he ragequit 

(9:06:34 PM) leondavidson@jabber.org/jabber.org [05:47:13] <~lubly> ATTENTION 

A TTENTIO N!! BREAKING NEWS FLASH!! [05:47:15] <~lubly> 

[05:47:15] <~lubly> | [05:47:16] 

<~lubly> [05:47:16] <~lubly> | 

| [05:47:16] <~lubly> | 

| J [05:47:16] <~lubly> 

[05:47:16] <~lubly> | ■ 

1 | [05:47:16] <~lubly> 


; [05:47:16] <~lubly> 

I 


[05:47:16] <~lubly> 


| [05:47:16] <~lubly> 


[05:47:16] <~lubly> 



_ [05:47:16] <~lubly> | 
[05:47:16] <~lubly>| 
<~lubly> 


■ [05:47:16] <~lubly> 

.1 I 

1 [05:47:16] <~lubly> 

[05:47:16] <~lubly> 
[05:47:16] <~lubly> ^ 

| [05:47:16] 
[05:47:16] <~lubly> 
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^ ^ [05:47:16] <~lubly> 

[05:47:21] <&xnite> OMG lubly my dick [05:47:24] <&xnite> why did you steal 
it? [05:47:37] <&xnite> i mean damn lubly you could have atleast got it hard first [05:47:45] «— 
AFulginiti ( ~af@mail.pr.pandasecurity.com) has Quit (Quit: Leaving) [05:47:48] <~lubly> lol 
[05:47:49] <~SanguineRose_> lol [05:47:56] <~lubly> he didn't like me :( 

(9:06:42 PM) leondavidson@jabber.org/jabber.org: he signed on from 
mail.pr.pandasecurity.com 

(9:07:48 PM) yohoho@jabber.ccc.de: lol 7] <AFulginiti> I am a developer on our mail box. 

(9:07:49 PM) yohoho@jabber.ccc.de: what the fuck 

(9:08:09 PM) leondavidson@jabber.org/jabber.org: incredible shit 

(9:08:44 PM) yohoho@jabber.ccc.de: yo good catch 

(9:08:45 PM) yohoho@jabber.ccc.de: because 

(9:08:46 PM) yohoho@jabber.ccc.de: that is plesk 

(9:09:44 PM) leondavidson@jabber.org/jabber.org: AWESOME 

(9:09:47 PM) leondavidson@jabber.org/jabber.org: ;) 

(9:09:53 PM) leondavidson@jabber.org/jabber.org: you love me dont you mother fucker 
(9:09:54 PM) leondavidson@jabber.org/jabber.org: tell me you love me 
(9:09:57 PM) leondavidson@jabber.org/jabber.org: say it 
(9:10:16 PM) leondavidson@jabber.org/jabber.org: another: 

http://desmond.imageshack.us/Himgl96/scaled.php?server=196&filename=pandasec.png&res= 

medium xss in their webmail app. we might be able to social engineer admins if we cant get their 
mail server 

(9:10:56 PM) yohoho@jabber.ccc.de: but 
(9:10:58 PM) yohoho@jabber.ccc.de: it is not vuln 
(9:11:00 PM) yohoho@jabber.ccc.de: hrmmmmz 
(9:11:15 PM) leondavidson@jabber.org/jabber.org: :l 

(9:11:25 PM) yohoho@jabber.ccc.de: I am not sure whether their mail is actually going there 
anyway 

(9:11:32 PM) leondavidson@jabber.org/jabber.org: scan their ip ranges 

(9:11:36 PM) leondavidson@jabber.org/jabber.org: I’m going to see if they have other boxes 

(9:11:45 PM) yohoho@jabber.ccc.de: they have many different ranges actually 

(9:11:56 PM) leondavidson@jabber.org/jabber.org: you scanned them all yet? 

(9:12:05 PM) yohoho@jabber.ccc.de: on 82., 87., and this is 208.116.38.105 

(9:12:13 PM) yohoho@jabber.ccc.de: I scanned 82 and 87s but they contain random plesk boxes 

(9:12:20 PM) yohoho@jabber.ccc.de: I will scan 208 now 

(9:12:21 PM) yohoho@jabber.ccc.de: but 

(9:12:24 PM) leondavidson@jabber.org/jabber.org: kk 

(9:12:26 PM) yohoho@jabber.ccc.de: look for more domains subdomains related to their shit 

(9:12:33 PM) leondavidson@jabber.org/jabber.org: yup 

(9:14:55 PM) yohoho@jabber.ccc.de: eww, windows 

(9:14:58 PM) yohoho@jabber.ccc.de: is this mail.pr 

(9:22:24 PM) yohoho@jabber.ccc.de: anything? 

(9:22:27 PM) yohoho@jabber.ccc.de: running scans now 
(9:23:13 PM) leondavidson@jabber.org/jabber.org: still looking 
(9:23:25 PM) leondavidson@jabber.org/jabber.org: 

http://www.youtube.com/watch?feature=player embedded&v= Y6ATzlaly8 = epi 
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(9:23:26 PM) leondavidson@jabber.org/jabber.org: c 

(9:25:51 PM) leondavidson@jabber.org/jabber.org: (9:25:28 PM) 

thisusernamesucks@jabber.org: Recovered.: 201/32174 hashes, 192/29710 salts 

(9:25:43 PM) leondavidson@jabber.org/jabber.org: sweet 

(9:25:53 PM) leondavidson@jabber.org/jabber.org: so far 

(9:25:55 PM) leondavidson@jabber.org/jabber.org: and 

(9:27:11 PM) yohoho@jabber.ccc.de: i'm actualy not sure mail.pr.panda is their main mail 
(9:28:05 PM) leondavidson@jabber.org/jabber.org: hes adding you 
(9:28:14 PM) yohoho@jabber.ccc.de: k 

(9:30:21 PM) leondavidson@jabber.org/jabber.org: (9:25:43 PM) 

leondavidson@jabber.org/jabber.org: sweet 

(9:25:44 PM) leondavidson@jabber.org/jabber.org: thanks matey 

(9:27:49 PM) leondavidson@jabber.org/jabber.org: heres my partner, add him. 

vohoho@iabber.ccc.de in case I get assasinaeted 

(9:28:08 PM) thisusernamesucks@jabber.org: lol wut 

(9:28:42 PM) thisusernamesucks@jabber.org: you expecting something? 

(9:28:58 PM) thisusernamesucks@jabber.org: haha 

(9:29:40 PM) leondavidson@jabber.org/jabber.org: just in case 

(9:29:43 PM) leondavidson@jabber.org/jabber.org: plus 

(9:29:49 PM) leondavidson@jabber.org/jabber.org: theres times im offline doing 
IRL shit 

(9:29:51 PM) leondavidson@jabber.org/jabber.org: and he gets lists 

(9:30:00 PM) leondavidson@jabber.org/jabber.org: hes my top trusted second in 

command 

(9:30:04 PM) leondavidson@jabber.org/jabber.org: so its trusable 
(9:30:07 PM) thisusernamesucks@jabber.org: gottcha 
(9:30:25 PM) leondavidson@jabber.org/jabber.org: there you go 
(9:31:53 PM) yohoho@jabber.ccc.de: k 

(9:32:12 PM) leondavidson@jabber.org/jabber.org: brb in a few 

(10:33:46 PM) yohoho@jabber.ccc.de: ok so that windows host didn’t get anywhere 

(10:33:50 PM) yohoho@jabber.ccc.de: also I don’t believe anything of value is on it 

(10:33:58 PM) yohoho@jabber.ccc.de: most of their mail is through their "cloud" services 

(10:34:01 PM) yohoho@jabber.ccc.de: mep.pandasecurity.com 

(10:34:09 PM) yohoho@jabber.ccc.de: webmail.pandasecurity.com 

(10:34:12 PM) yohoho@jabber.ccc.de: mep.pandasecurity.com/admin 

(10:34:19 PM) yohoho@jabber.ccc.de: in the support sql there is some talk about mep 

(10:34:28 PM) yohoho@jabber.ccc.de: its where their clients manage their email accounts 

(10:34:35 PM) yohoho@jabber.ccc.de: also panda's mx servers point ehre 

(10:34:38 PM) yohoho@jabber.ccc.de: so it's gotta be it 

(10:35:12 PM) leondavidson@jabber.org/jabber.org: ja 

(10:35:18 PM) yohoho@jabber.ccc.de: well actually not quite 

(10:35:18 PM) yohoho@jabber.ccc.de: -bash-3.2$ host mep.pandasecurity.com 

mep.pandasecurity.com has address 87.236.241.214 

mep.pandasecurity.com has address 87.236.241.215 
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mep.pandasecurity.com mail is handled by 10 mx01.mep.pandasecurity.com. 
mep.pandasecurity.com mail is handled by 20 mx02.mep.pandasecurity.com. 

-bash-3.2$ host pandasecurity.com 
pandasecurity.com has address 91.216.218.78 

pandasecurity.com mail is handled by 1 smtpinl.pandafiltrado.euskaltel.es. 
pandasecurity.com mail is handled by 1 smtpin2.pandafiltrado.euskaltel.es. 
pandasecurity.com mail is handled by 10 mail.pandasoftware.com. 
pandasecurity.com mail is handled by 40 mail.pandasecurity.com. 

(10:35:33 PM) yohoho@jabber.ccc.de: mail.pandasecurity is garbage though nothing there 

(10:35:37 PM) yohoho@jabber.ccc.de: i'm pretty sure it's mep though 

(10:35:59 PM) yohoho@jabber.ccc.de: now there is also webmail.pandasecurity.com.br 

(10:36:03 PM) yohoho@jabber.ccc.de: which looks different from mep 

(10:37:11 PM) yohoho@jabber.ccc.de: http://webmail.pandasecurity.com.br/ 

https://webmail.mep.pandasecurity.com/ https://mep.pandasecurity.com/ 

https://mep.pandasecurity.com/admin/ 

(10:37:13 PM) yohoho@jabber.ccc.de: all different 

(10:37:22 PM) yohoho@jabber.ccc.de: I found list of subdomains too 

(10:37:34 PM) yohoho@jabber.ccc.de: apac.pandasecurity.com 

ca.pandasecurity.com 

channel.pandasecurity.com 

de.pandasecurity.com 

escorp2jboss01.pandasecurity.com 

escorp2jboss02.pandasecurity.com 

escorp2jboss03.pandasecurity.com 

escorp2jboss04.pandasecurity.com 

escorp4mail03.pandasecurity.com 

escorp4smtp01 .pandasecurity.com 

escorpsmtp04.pandasecurity.com 

extranet.pandasecurity.com 

fr.pandasecurity.com 

fwl.pandasecurity.com 

hn.pandasecurity.com 

https3a2f2fshop.pandasecurity.com 

hu.pandasecurity.com 

j p. pandasecurity. com 

mail, pandasecurity. com 

managedprotection.pandasecurity.com 

mep.pandasecurity.com 

mx02mep.pandasecurity.com 

pandalabs.pandasecurity.com 

pe.pandasecurity.com 

postoffice.pandasecurity.com 

pres s .pandasecurity. com 

pt.pandasecurity.com 

research.pandasecurity.com 

se.pandasecurity.com 
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shop.pandasecurity.com 

soporte.pandasecurity.com 

support.pandasecurity.com 

th.pandasecurity.com 

uk.pandasecurity.com 

updates.pandasecurity.com 

us.pandasecurity.com 

uy.pandasecurity.com 

www.pandasecurity.com 

(10:37:52 PM) yohoho@jabber.ccc.de: extranet gives login/password... I already tried all 
usernames/passwords cracked so far... username being without the @pandasecurity.com 
(10:37:55 PM) yohoho@jabber.ccc.de: trying hard here 

(10:38:07 PM) yohoho@jabber.ccc.de: I didn't see any keys on either of those two boxes 
(10:38:31 PM) yohoho@jabber.ccc.de: err no actually, there are these 
(10:38:33 PM) yohoho@jabber.ccc.de: -rw-r-r— 1 root root 838 2010-04-26 11:39 
techcenter.pandasecurity. com. csr 

-rw-r—r— 1 root root 963 2010-04-26 11:36 techcenter.pandasecurity.com.key 
(10:38:44 PM) yohoho@jabber.ccc.de: -rw-r—r— 1 root root 951 Nov 1 2008 ca.key 
-rw-r—r— 1 root root 17 Nov 1 2008 ca.srl 

(10:38:50 PM) yohoho@jabber.ccc.de: -rw-r—r— 1 root root 963 Sep 21 2009 private.key 
-rw-r—r— 1 root root 887 Sep 21 2009 privatex.key 

(10:39:17 PM) yohoho@jabber.ccc.de: ca and private are from /root/ on the 
support.pandasecurity.com box 

(10:39:22 PM) yohoho@jabber.ccc.de: techcenter is from the other box 

(10:40:46 PM) yohoho@jabber.ccc.de: so can you help with this 

(10:44:34 PM) leondavidson@jabber.org/jabber.org: yes 

(10:44:40 PM) leondavidson@jabber.org/jabber.org: looking at that br box 

(10:44:46 PM) leondavidson@jabber.org/jabber.org: one seckz 

(10:45:19 PM) leondavidson@jabber.org/jabber.org: hmm 

(10:45:30 PM) yohoho@jabber.ccc.de: they reuse system paasses across servers' 

(10:45:32 PM) leondavidson@jabber.org/jabber.org: did he give you what hes cracked so fr? 
(10:45:33 PM) yohoho@jabber.ccc.de: here 
(10:46:07 PM) yohoho@jabber.ccc.de: 

INSERT INTO 'accounts' VALUES 

(1,’plain','bioamontejo’),C2,’plain’,’cp2009’),(3,’plain’,’s3rvlc lOsprO'),(4,’plain’,’panda47228’),(5,’pi 
ain','panda47228'),(6,'plain','pr3ns4p4nd4'),(7,'plain','pr3ns4p4nd4'),(8,'plain','pr3ns4p4nd4'),(9,'p 
lain','pr3ns4p4nd4'),( 10,'plain','20 lOcibercrlme'),(11,'plain','panda47228'),( 12,'plain','soport3'),(l 
3,'plain','soport3'),(14,'plain','fixmypanda'),( 15,'plain','fixmypanda'),(16,'plain','panda47228'),(17,' 
plain','s3porte2010'),(18,'plain','rob3rspi3rr3'),(19,'plain','wlwlk01ais4pr3sld3nt'),(20,'plain','wl 
klus3rlsgonn4dl3'),(21,'plain','w3r3ismycloud'),(22,'plain','0nd3rst3unlng'),(23,'plain','r3s3arch' 
),(24,'plain','Pand414b5'),(25,'plain','panda'),(26,'plain','p4ndalabs'),(27,'plain','porrusald4'),(28,'pi 
ain','nanoav'),(29,'plain','fixmypanda'),(30,'plain','cnees'),(31,'plain','fixmypanda'),(32,'plain','m4k 
in4 v4j4'),(33,'plain','chlch01b4n3zs3rr4d0r'),(34,'plain','m4kin4v4j4'),(35,'plain','panda2011'),(3 
6,'plain','k4rm3nd3m4ir3n4'),(37,'plain','prueb4'),(38,'plain','StephanUrkell'),(39,'plain','fixmyp an 
da'),(40,'plain','w3b3dlt0r'),(42,'plain','fixmypanda'),(43,'plain',T0rg3ts3curlty'),(44,'plain',T0rg3t 
s3cur lty'),(45,'plain','f0rg3ts3curlty'),(46,'plain','fixmypanda'),(47,'plain','f0rg3ts3curlty'),(48,'pi 
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ain','fOrg3ts3curlty'),(49,'plain','mfumOlkntO'),(50,'plain','delatouch'),(51,'plain','fixmypanda'),(5 
2,'plain','abirox'),(54,'plain','fixmypanda'),(55,'plain','frenopatico'),(56,'plain','soport3'); 

INSERT INTO 'accounts' VALUES 

(1,’plain’,’nvEQurNn’),(2,’plain’,’nvEQurNn’),(3,’plain’,',.mendeku'),(5,’plain’,’kaixosh’),(6,’plain’,’k 
aixosh'),(9,'plain','kaixosh'),(15,'plain','kaixosh'),(16,'plain','kaixosh'),(17,'plain','kaixot'),(18,'plai 
n'/kaixot’),(19,'plain','kaixot'),(20,'plain','alfi22'),(21,'plain','alfi22'),(22,'plain','alfi22'),(23,'plain',' 
pallars987'),(25,'plain','pallars987'),(31,'plain',Tkike2'),(32,'plain','kaixoir'),(33,'plain',Tkike2'),(3 
5,'plain','kaixolb'),(36,'plain','kaixolb'),(37,'plain','kaixoe'),(40,'plain','kaixou'),(41,'plain','kaixou'), 
(42,'plain','kaixoa'),(43,'plain','kaixom'),(44,'plain','kaixol'),(45,'plain','kaixol'),(46,'plain','kaixoa') 
,(47,'plain','kaixom'),(48,'plain','kaixol'),(49,'plain','kaixol'),(50,'plain','kaixoa'),(51,'plain','kaixoa' 
),(52,'plain','kaixoalessandra'),(53,'plain','kOkowaw4'),(54,'plain','fixmypanda'),(55,'plain','fixmy 
panda'),(57,'plain','fixmypanda'),(58,'plain','fixmypanda'),(60,'plain','fixmypanda'),(61,'plain','nan 
oav'),(65,'plain','fixmypanda'),(66,'plain','fixmypanda'),(67,'plain','fixmypanda'),(68,'plain','fixmy 
panda'),(69,'plain','pandasecurity_2'),(70,'plain','fixmypanda'),(71,'plain','fixmypanda'),(72,'plain', 
'fixmypanda'),(73,'plain','fixmypandasup'),(74,'plain','fixmypanda'),(75,'plain','fixmypanda'),(76,' 
plain','cnccs'),(77,'plain','4panda'),(78,'plain','panda47228'),(79,'plain','panda47228'),(81,'plain','ka 
ixoea'),(82,'plain','wpeal 234'),(83,'plain','Fr33p4nd4s3cuR'),(84,'plain','eureka'),(85,'plain','eurek 
a'),(86,'plain',’korl234’),(87,'plain',’asdl234’),(88,'plain',’fdcl234’),(89,'plain','fixmypanda'),(90,'p 
lain','oonnsupport'),(91,'plain','vipvip'),(92,'plain','r3s3arch'),(93,'plain','kaixosa'),(94,'plain','kaixo 
sa'),(95,'plain','panda'),(96,'plain','Pand414b5'),(97,'plain','p4ndalabs'),(98,'plain','eureka'),(99,'plai 
n','eureka'),(100,'plain','sbs_p4nd4s3cur'),(102,'plain','Ntsbs2009'),(103,'plain','Ntsbs2009'),(104,' 
plain','fixmypanda'),(105,'plain','kaixokc'),( 106,'plain','kotkot'),(107,'plain','supervi014'),(108,'plai 
n','kaixokf),(109,'plain','kotkot'),(l 10,'plain','supp0rtfrus3r'),(l 11,'plain','supp0rtnlus3r'),(l 12,'pla 
in','kaixoap'); 

(10:46:23 PM) yohoho@jabber.ccc.de: those are all passes 
(10:47:03 PM) leondavidson@jabber.org/jabber.org: no wy son 
(10:47:05 PM) leondavidson@jabber.org/jabber.org: plintext 
(10:47:06 PM) leondavidson@jabber.org/jabber.org: REALLY 
(10:47:07 PM) leondavidson@jabber.org/jabber.org: LOL 
(10:49:53 PM) yohoho@jabber.ccc.de: that's how plesk rolls 
(10:50:49 PM) leondavidson@jabber.org/jabber.org: LOVE IT 
(10:51:30 PM) yohoho@jabber.ccc.de: 72 hashes 

(10:51:34 PM) yohoho@jabber.ccc.de: cracked that are @pandasecurity 

(10:55:23 PM) yohoho@jabber.ccc.de: but most of them seem to have already been cracked from 
that first list 

(10:55:28 PM) yohoho@jabber.ccc.de: bu there's a few more 

(11:05:20 PM) leondavidson@jabber.org/jabber.org: so we got the twitter acct of pand? 

(11:06:47 PM) yohoho@jabber.ccc.de: do we 
(11:06:48 PM) yohoho@jabber.ccc.de: ? 

(11:06:56 PM) yohoho@jabber.ccc.de: I haven't checked it at all. 

(11:07:39 PM) leondavidson@jabber.org/jabber.org: thought you just sai it 
(11:07:40 PM) leondavidson@jabber.org/jabber.org: ill see 
(11:07:50 PM) yohoho@jabber.ccc.de: err 

(11:08:05 PM) yohoho@jabber.ccc.de: I mean 72 hashes cracked that were 
email @ pandasecurity.com 

(11:08:09 PM) yohoho@jabber.ccc.de: the others are part of their support db 


105283 


(ll:08:l2PM) leondavidson@jabber.org/jabber.org: kk 
(11:08:34 PM) yohoho@jabber.ccc.de: ok so 

(11:08:40 PM) yohoho@jabber.ccc.de: im bout to pass out for a few hours I think 

(11:08:53 PM) yohoho@jabber.ccc.de: but I will leave terminal open so 

(11:09:03 PM) yohoho@jabber.ccc.de: you can pass me ur findings 

(11:09:53 PM) yohoho@jabber.ccc.de: please help with this 

(11:09:59 PM) leondavidson@jabber.org/jabber.org: yup 

(11:10:03 PM) leondavidson@jabber.org/jabber.org: get rest brohm 

(4:50:38 PM) yohoho@jabber.ccc.de: hi 

(5:19:23 PM) yohoho@jabber.ccc.de: yo 

(6:01:07 PM) yohoho@jabber.ccc.de: yo 

(9:46:39 PM) leondavidson@jabber.org/jabber.org: yooo 
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